JLBN – Setup HTTPS SSL on WAMP
Hypertext Transfer Protocol over Secure Socket Layer or HTTPS is a URI scheme used to indicate a secure HTTP connection. It is syntactically identical to the http:// scheme normally used for accessing resources using HTTP. Using an https: URL indicates that HTTP is to be used, but with a different default TCP port (443) and an additional encryption/authentication layer between the HTTP and TCP. This system was designed by Netscape Communications Corporation to provide authentication and encrypted communication and is widely used on the World Wide Web for security-sensitive communication such as payment transactions and corporate information systems.
In this tutor guide for WAMP, we will show you how to create a self-signed HTTPS SSL certificate; then, how to implement this self-signed certificate into WAMP; then, obtain a FREE Trusted HTTPS SSL Certificate to replace the self-signed one.
Tut worked for me for wamp2.0 with apache 2.2.11.
A couple of tips:
1. In step 1, you need to rename one of the downloaded files “openssl.conf” to “openssl.cnf”, and then use this file to replace existing file.
2. If your wamp is installed in a folder that has a name with a space in it like C:\Program Files\wamp\… then make sure you enclose this path with double quotes when using it in cmd.
Hands down I’d recommend choosing a cheap ssl certificate. From what I’ve seen, they all function the same, and installation methods are reasonably similar, but the price varies dramatically. Wikipedia has a decent comparison of ssl certificate providers.
Excellent tutorial !
Everything worked on the first try !
Thanks a lot !
Thank you!!!
After going through many forums and trying to get Wamp2.0 working with SSL I found your tutorial and download file replacements.
Working through your tutorial I had no problems and it worked!
For anyone having issues for my setup I had to change;
All references to C:/wamp/Apache/apache.2.2.8/… to C:/wamp/apache/Apache.2.2.11/…
I had to make sure that all JLBN references were replaced with my own setup configuration (watch out for them)
WampServer Ver: 2.0 (there is no letter after my ver number)
Apache ver: 2.2.11
Windows: XP Pro (SP3)
I need various virtual hosts setup via the windows hosts file and also http-vhosts.conf file. I use a site id then .dev for every project so I am unsure if adding more sites to the httpd-ssl.conf file will work however I only require one for the time being.
Another problem I have is that the SSL is active across the entire website as I work with a PHP5 framework which isn’t folder specific. Not sure how you could limit the https:// protocol as I’ve heard there may be issues transferring variables between http:// and https:// however I’m probably in the right position now to ponder, test and understand.
Thank you.
Cheers
James
Ok, Ill type it in again, this time in short version.
Cannot even get by step 3, where it says to enter a pass phrase. The command prompt won’t even let me enter anything into it. And there are errors, which I really dont care to type in here again. (made that mistake the first time aka, my 3 posts).
Jamie, if you can’t type in command prompt, I’m afraid there is something wrong with your PC and nothing to do with this guide
If you’re still wondering about that, it’s because you can type, but it won’t show up for security reasons. So, just type it in, hit enter, type it again. It won’t show up, but if you typed it the same both times, it should work.
Hey where did my comments I spent awhile typing out (incl errors from command prompt) go? I dun wanna do this again.
I already commented…
Hi there 🙂
I’m unfortunately stuck on Step3, as I apparently cannot use this retarded Vista Dos Command Prompt.
For eg, when I type in the below: openssl genrsa -aes256 -out pass.key 2048, then you’re supposed to enter a pass phrase correct? But the command prompt will not let me enter anything using any key on my keyboard.
……………………………………………………………………………………………………………………+++
…………+++
unable to write ‘randomstate’
e is 65537
Enter pass phrase for pass.key:
(But I cannot enter anything…) Then it says after pressing enter anyways that…
Verifying – Enter pass phrase for pass.key:
Verify failure
User interface error
6244:error:0906906F:PEM routines:PEM_ASN1_write_bio:read key:.\crypto\pem\pem_Iib.c:334:
Does WampSSL work with Vista Home Premium, and or what muct I do to get past step 3? I do like your indepth guide though! Just cannot install it.
Hi , I am using 64bit OS. I am installing WAMP Server. I found the error when i start it is “SSLPassPhraseDialog builtin is not supported on Win32”. I came to know that i need to remove RSA key from my server.key file. Any help to do it on windows 7, 64bit OS.
Hey, thanks for the tutorial. Unfortunately, when I try to restart the apache service, it does not come back up! I’ve done exactly what your directions say and double-checked the paths. Any idea what I can try? The only way to get apache to boot is to comment ‘Include conf/extra/httpd-ssl.conf’
Thanks!
Might 2011 often be superb with regard to your family.
Also the giuide is wrong version.
This site is a big joke.
Björn, thank you for your comment; however, just like most other tutorial websites, this site will only update the guides based on a stable release version and currently it still have a lot of people having problem to install the latest Wamp version and thus we will NOT update this guide until a stable version releases 😉
raru
Ssl Wamp es para la versión anterior de Apache. Puede volver a la antigua versión de Apache 2.2.11 Creo que tienes 2.2.17 como yo.
Wamp ssl is a very old version … for Apache2.2.11 it dosnt fit Wamp 2 / Apache2.2.17
no puedo intalar un certificado ssl, me da error en el paso 10, haber si alguien me puede ayudar, gracias de antemano.
If you are experiencing problems make sure that directories such
C:/wamp/bin/Apache/apache2.2.X/conf/ssl/
are
C:/wamp/bin/apache/Apache2.2.X/conf/ssl/
GO and esobje
We will check and update if needed to make sure it’s compatible with latest Wamp versions 😉
I gave it up as a bad joke. I could not get my Apache up and running. There definitely is something wrong.
Were you can fix it? how? thnaks
I fix it, in the file httpd-ssl.conf
find: CustomLog “C: / wamp / logs / ssl_request.log” \
“% t% h% {} x% {SSL_PROTOCOL SSL_CIPHER} x \”% r \ “% b”
replace
CustomLog “C: / wamp / logs / ssl_request.log% t% h% {} x% {SSL_PROTOCOL SSL_CIPHER} x \”% r \ “% b”
If this does not work, execute the command httpd-t in C: \ wamp \ bin \ apache \ Apache2.2.11 \ bin, this command does a check and show errors at the start
and everything works fine, Greetings
Hi, I cannot get this working on Windows Server 2003 x86.
I’m running WAMP 2.1 with PHP 5.2.6 and Apache 2.2.11
If I use the files in the WAMPSSL.zip, my apache will not start with the following error:
The Apache service named reported the following error:
>>> httpd.exe: Syntax error on line 119 of C:/wamp/bin/apache/Apache2.2.11/conf/httpd.conf: Cannot load C:/wamp/bin/apache/Apache2.2.11/modules/mod_ssl.so into server: The specified module could not be found.
If I try with the original files i get the following error:
Error openssl.exe – Ordinal Not Found. The ordinal 286 could not be located in the dynamic link library SSLEAY32.dll.
Any tips? It’s driving me mad…
Hello
Many thanks for an excellent step by step instruction. Works for me.
I have one problem though. With the index.html it works. Now i have put in my webpage with has index.php. Then i have to manually write for an example https://server/index.php . Then it works. Anyone knows how to config so it automatically loads index.php like with normal http so i just have to write http://server
best regards
Toby