JLBN – Setup HTTPS SSL on WAMP
Hypertext Transfer Protocol over Secure Socket Layer or HTTPS is a URI scheme used to indicate a secure HTTP connection. It is syntactically identical to the http:// scheme normally used for accessing resources using HTTP. Using an https: URL indicates that HTTP is to be used, but with a different default TCP port (443) and an additional encryption/authentication layer between the HTTP and TCP. This system was designed by Netscape Communications Corporation to provide authentication and encrypted communication and is widely used on the World Wide Web for security-sensitive communication such as payment transactions and corporate information systems.
In this tutor guide for WAMP, we will show you how to create a self-signed HTTPS SSL certificate; then, how to implement this self-signed certificate into WAMP; then, obtain a FREE Trusted HTTPS SSL Certificate to replace the self-signed one.
Love your blog and your guides. The issues i have is with the number of pages and the need to download the pictures or view them in another window.
Why not create the guides in pdf form and just offer them for sale @ rock bottom prices. I for one know that i’ll purchase them cos they are very helpful.
keep the good work up and keep em guides coming.
Thanks
All those guys who have problem starting Apache with SSL, check windows event log, you will find the real problem there. I have tried some solution here, none of them work, finally i found my own way.
Feng, you only see the problem in your wamp pc; however, most people might encounter other problems that did NOT even show in the log files, and even users can see the errors in the log files, most people don’t have any clue what it is, what causes it and how to resolve that; thus instead showing off, you would post specific steps like others to help new comers 😉
Hah! Thanks! Finally found an informative error message. (By the way, it was that in httpd-ssl.conf, SSLPassPhraseDialog is not recognized. Anybody have any ideas?)
Aha! Fantastic! From there, I looked up the error, and found that it’s caused by “#LoadModule ssl_module modules/mod_ssl.so” in httpd.conf. Uncomment that line, and it works! Huzzah! Thanks, Feng!
Nvm mind i got it sorted, silly mistakes on my end like syntax errors etc
was a great help thanks for the guide
hey guys i downloaded the WampSSL file as i was having some problems with apache restarting after changing the .conf files and enabling the ssl module.
Unfortunatly it hasnt worked and apache still wont restart, can any1 shed some light on why this may be? I realitily new to this so dont me afraid to ask about things that may seem trivial to experts like yourselves 😛 lol
I’m trying to use ssl but I had a problem at the second step..
I’m using windows and when I try to create the key i get a warning message
WARNING: can’t open config file: d:/test/opeenssl098i/openssl.cnf
i don’t have any D:\ where this path come from?
thx
bye
antonio
antonio, that’s why we’ve provided WampSSL which you can download here
it was a very usefull tutorial.
i had some mistype but finally i did it!
keep in mind that .conf files are case sensitive!
and last problem:
the bn(83th) comment completely solved my problem !
thx a lot bn! >:D<
If WAMP not working, that is not because of domain name. You have configured incorrectly in any of the step.
In httpd.conf, comment this line
#Include conf/extra/httpd-ssl.conf
and start the wamp server. It may be work.
In order set SSL, you need to follow only JLBN step and not the comment step.
Pop up Title: Aestan Tray Menu error you can ignore for now.
commenting this line out works:
Include conf/extra/httpd-ssl.conf
What a life-saver. I thought for a while I screwed my Wamp.
And THANK YOU!
Hi,
can anyone please help me it would be much appreciated. I followed this guide as close as possible and followed comments 37, 45, 47, 58, 72, 73 and 74. When I tried step 45: enable open_ssl on WAMP the following pop up message appeared:
Pop up Title: Aestan Tray Menu
Message: Could not execute menu item (internal error) [Exception] Could not perform service action: The service has not been started
I am not sure why this has happened. I am using Apache2.2.11 on XP and I have installed WAMP on D drive not C. When I installed it I left my domain as localhost the default setting but when I followed this guide I used Johno as my domain, will this have an effect on WAMP not working?
Hello All,
I have solved my issues Now. My https:// localhost is working fine.
JLBN – Setup HTTPS SSL on WAMP is a great POST
thanks
Oh wow. I am trying to get it to work. How did you do it. I cannot get my server to start.
My Apache web server.
let me add this line also,
SSLOptions +StdEnvVars
Options Indexes FollowSymLinks MultiViews
AllowOverride All
Order allow,deny
allow from all
How should i access the file https://localhost/ssl or https://localhost ? Both way is not working. I repeated the step agine. But result is same.
Inorder to repeat the step shall I delete the system files which i copyed to C:\Windows\System32 (file name libeay32.dll and ssleay32.dll)
this is my argent requirement, after correcting locally i want follow the same step in dev server.
Any comment from you guys are welcome. I appreciate your time and hard work
Dear All,
this is great work which tells the step by step to set up SSL. I did all the step and I got all result as shown the images until the . But final result is not getting.
My server name is localhost
I created a directory ‘ssl’ for testing.
In the config file (httpd-ssl.conf)
DocumentRoot “C:/wamp/www/ssl”
ServerName localhost:443
and
SSLOptions +StdEnvVars
—
—
—
In setp 49 while I type https://localhost
Unable to connect message display.
In order to change the path shall I repeat all the step again
you guys have any suggestion.
I am getting the impression from other sites that I’ve checked that this is a security feature built in to IE 7 and 8 that cannot be bypassed unless you purchase a Cert from a company such as verisign etc. its just a matter of ignoring it. I have already imported the cert to the browser and added the site, (i.e. https://localhost/Manta), as a trusted site.
By the way do you have a guide for creating a CSR to issue a server cert for the webserver?
Irva, this guide give you the ideas to setup SSL using self cert for your site so you can set up SSL with real cert later on; thus, you should not worry too much about that error as long as your SSL is working; anyway, that error point out your cert does not match the sitename that you setup, ie error when using google.com instead http://www.google.com and to correct that error, you must use correct site name that you setup, ie JLBN in our guide and only sitename, not including subfolder, ie https://localhost/ but not https://localhost/Manta
We suggest you to follow our VH guide to setup a local domain to use with your self cert, ie https://manta/ instead https://localhost/Manta and here is our VirtualHosts guide:
http://blog.jlbn.net/?p=23
I’m just trying to follow this to setup a test cert for my local WAMP. Is it possible to use this without a virtual host, i.e., just have the domain as localhost? And then be able to use the cert for any subfolders added later? This looks like a good tutorial but I’m now stuck at this point. Any advice would be much appreciated. Thanks!
Karen, just make a (fake) local domain just like example JLBN we’re using in this guide 😉
the site name I am using is Manta, the directory for which I included in an ssl folder I created in the www root, (incidenttally this is not the same ssl folder your guide instructed).
Within this ssl folder is my Manta directory and a personal information exchange, (seems like some sort of cert). When I use https://localhost/Manta – the test site comes up fine however in the address bar (which is red instead of white), the certificate error comes up and when I click on it, it says the “the security certificate presented by this web site was issued for a different website address”.
Unlike with fire fox there is no option, or at least I do not know where to find that option, to add certificate exception.
You should note that when I followed the tutorial instructions using fire fox I get no problems, however when I use IE8 I am getting this problem although I install the certificate in the Trusted Root CA. I continue to get Certificate error – mismatched address
OK the site is coming up however I am still getting a certificate error – mismatched address
No I have not I am still having problems. I am not sure whether I should use http://localhost/ssl/index.html
I created a folder in the www root called ssl and placed an index.php and an index.html in it and tried running both without luck.
Irva, since you followed this SSL guide, you suppose to use https://localhost/ssl/index.html not http://localhost/ssl/index.html; ie. https but not http
Also, did you add certificate exception in IE?
This is a awesome tutorial. Thanks a lot.
keep it up 🙂
incidentally, this is one of the best sites I’ve come across in terms of providing step by step instructions with screen prints. It really has assisted a newby like myself, as I have been searching exhaustively for this type of information.
Keep up the excellent work! Well done!
I am using this to test on via the local machine, therefore I do not have an actual live website that I’m using just yet. do I follow all the steps exactly as is and at what point do I use the localhost name?
I followed the steps to a “t” substituting the jlbn for the name of my proposed site when creating the key and crt files, everything went through well however when I tried testing via https://localhost/ssl/index.php or index.html it did not work, I got an error message regarding the certificate. I installed the certificate as a trusted cert on my machine, however I continue to get the same error message. What am I doing wrong?
Hi, BN,
Thanks for your kind response. But where should I change the path?
benbay
benbay, could you please be a little more specific what path you mentioned?
Irva, did you resolve your problem?