新聞財經娛樂♬資訊 News Economy

After install xampp on my window-xp, I am able to surf http:localhost:80 in my browser
But when  I am setting up and using openSSL and setup up self-signed SSL
certification to my localhost site  , surfing links such as http://localhost and https://localhost
both are not working and browsers give me the disconnection  error message .

Setting up for enabling openssl, I modified some code in http.conf as follows

-taking out "#" in #LoadModule ssl_module modules/mod_ssl.so
and Include "conf/extra/httpd-ssl.conf"

-and take out ";"  in ;extension=php_openssl.dl in php.ini

Setting SSL self-sign Certfication, I follow this link at

-http://www.opencodez.com/apache/ssl-certificate-and-install-in-xampp.htm
-and get the crt and key file and put it in httpd-ssl.conf

 SSLCertificateFile "c:/xampp/php/extras/openssl/server.crt"
  SSLCertificateKeyFile "c:/xampp/php/extras/openssl/server.key"

-and set <VirualHOST> as follows

<VirtualHost localhost:443>
    #   General setup for the virtual host
    DocumentRoot "C:/xampp/htdocs"
    ServerName localhost:443
    ServerAdmin webmaster@localhost
    ErrorLog "logs/error.log"
    <IfModule log_config_module>
        CustomLog "logs/access.log" combined
    </IfModule>
   
    #   SSL Engine Switch:
    #   Enable/Disable SSL for this virtual host.
    SSLEngine on
..............
</</VirtualHost>  

-stop xampp server and restart it for files update

But all is not working no matter I try http://localhost:80 or https:localhost:443 both are NOT working for surfing in browsers,Why?
Please advise where the setup is doing wrong ?
And I also attach  those three modified files for your  checking, httpd-ssl-conf, httpd-conf, php.ini
It tooks my time for that more than 2 days , please help on it
Please advise, thanks
Duncan

Yes, the CA used to sign a certificate has to be known by the browser a user uses either by means of being a known CA that is included as trusted or the CA is added as trusted.



Passphrase deals with whether the apache server will start after reboot.  If you are fine with the script providing the passphrase, that's fine.

You need to add the CA you created to sign the certificate as trusted in your browser.

You need to use openssl to strip the passphrase from the certificate.

http://www.openssl.org/related/binaries.html

Download and install.
you would then need to run
openssl rsa -in <current_passphrase_protected.key> -out new.key
you would then rename new.key to

Do the option you think is best.
I've not used that option. Securing the key initially or when moving it as a backup is one thing, maintaining a passphrase is unnecessary.
if someone gained access to copy the key, they  have access to copy the script that provides the passphrase.

The security warning tells you what the error is?
Is it the name to which you are going not matching the name on the certificate?
Is the error deals with untrusted CA? i.e. your system does not trust the CA that signed the certificate.

You are not providing any information on which to base a suggestion.  If this is a hostname issue, you have to make sure that you use a full hostname i.e. hostname.somedomain.com when creating the certificate.
If this is a self signed certificate, you need to add the CA you created to the trust list on this computer to avoid getting those warnings.