新聞財經娛樂♬資訊 News Economy

I am studying using SSL on my website with my PC localhost server.
Before I  consider to buy a trusted Certification SSL from thrid party , I
would like to do self-sign SSL certification test before wasting my money and
purchase the trusted Cert.
I install XAMPP 1.7.7 on my window-xp comptuer. And it is no problem at
all and my  xampp status menu page also show php, HTTPS, mysql database are
all activiated. So it is fine. So I am going to get a self-sign SSL certification from
the following example links,  
http://www.opencodez.com/apache/ssl-certificate-and-install-in-xampp.htm
http://www.devx.com/opensource/Article/20085/1763/page/2
http://www-uxsup.csx.cam.ac.uk/~jw35/docs/doing_ssl.html
http://www.mnxsolutions.com/apache/removing-a-passphrase-from-an-ssl-key.html

I'm working around those example link , all command is working but
not working when typing https://localhost  in my browsers.
I set all related comman name and host to localhost. And it seems
the issue is at pass phrase but I tried to removing the pass phrase or
set the pass phrase into file and called it in httpd-ssl-conf. But all is
not working.
So version 1.7.7 of xampp, it should be more easier to enable https with
SSL certification usage, but it is not true. Spenting a lot time.

When I type https://localhost, all broswers(chrome, IE, firefox) give me
the security warning, " the website shown the security cert is  NOT from the
trusted cert unit issue and suggest to close the web page and Don't
continue to browser the site OR continue going to website.
Please advise for solving the pass phraseing issue in SSL

When I type normal http://localhost without https that is normal working
When I type http://localhost:443/ that is also okay working but always NOT
working on https://localhost

LoadModule ssl_module modules/mod_ssl.so is included in my httpd.conf
OPENSSL_CONF="c:/xampp/apache/bin/openssl.cnf"  is set

Any comment after you review my attached three configure files for the problem
Thanks



Duncan

This is because you have a self-signed certificate.  Depending on the browser you use, you can add the CA to the trusted certificate store and you will no longer get this warning.

When you purchase a certificate, this will likely not be an issue.

In httpd-ssl.conf remove/comment out the ServerName localhost:443 entry.

https://localhost and https://localhost:443 are one and the same.  Not sure why it is not working for you or what is not working for you.