WampServer

Hi,

i have some issues with using the module "ssl_module", which is located in the apache module menu.

As when i do click on the module i get an error popup (Aestan Tray Menu) saying: Cound not execute menu item (internal error) [Exception] Could not perform service action: The service has not been started.

As when i look at the Apache Modules list the "ssl_module", is ticked but Apache is has failed to start, and i'm using the version WAMP5 1.7.3.

I need this module to be running asap.

Please help.

Thanks alot.



Edited 1 time(s). Last edit at 12/22/2007 12:53AM by ta5na.

Hi,

i have some issues with using the module "ssl_module", which is located in the apache module menu.

As when i do click on the module i get an error popup (Aestan Tray Menu) saying: Cound not execute menu item (internal error) [Exception] Could not perform service action: The service has not been started.

As when i look at the Apache Modules list the "ssl_module", is ticked but Apache is has failed to start, and i'm using the version WAMP5 1.7.3.

I need this module to be running asap.

Please help.

Thanks alot.

You need to setup certificate and key for ssl to work

Have fun,

FREE One A Day
FREE Photo
FREE Games
FREE Websites
FREE Portable GPS
FREE WAMP Guides

Hi,

So how am i suppose to setup a certificate and key for SSL to work.

I'm not the best with WAMP or lets say Apache, please help as i would be very appreciated, i need this working asap.

A little step by step setup guide to resolve this issue would be very helpful, as i did a lot of research using google and i couldn't make it to work.

I have tried various ways of resolving ssl to work with Apache but for some reason Apache would not work and it keeps breaking.

As i had made a backup of httpd.conf before i did make any chance so my WAMP still working but of course SSL doesn't.

Thanks alot.

Hi,

I'm using WAMP Server 1.7.3, which has Apache 2.2.4 including the openssl cnt i do it on this setup, as i have documented about it as i'm working on a project for my final year at university.
Please help, and thanks for all the help.

Thanks alot.

Hi guys and girls,

People keep sending me tons of pms and emails to ask about SSL/HTTPS for wamp2, so I've finally sacrifice to spend some of my holiday time to implement this, and it WORKS as my expectation, which you can see here:

[i117.photobucket.com]

But please, don't bombard me w/ pms and emails because I will post it on my websites soon

Again, Merry Christmas and Happy New Year 2008 to everybody

Have fun,

FREE One A Day
FREE Photo
FREE Games
FREE Websites
FREE Portable GPS
FREE WAMP Guides

Hi,

Sorry to say but you told me to email you the 10lines of the code as i did follow the steps you told me to take, which i'm certainly sure the way you did yours. Although i'm not using wamp 2 as i have documented wamp 1.7.3 for my university project and i cant change it. So please please help!

Once more again the codes from the apache log are listed below:

[Tue Dec 25 21:09:34 2007] [notice] Parent: Received shutdown signal -- Shutting down the server.
[Tue Dec 25 21:09:34 2007] [notice] Child 5228: Exit event signaled. Child process is ending.
[Tue Dec 25 21:09:35 2007] [notice] Child 5228: Released the start mutex
[Tue Dec 25 21:09:36 2007] [notice] Child 5228: Waiting for 250 worker threads to exit.
[Tue Dec 25 21:09:36 2007] [notice] Child 5228: All worker threads have exited.
Error in my_thread_global_end(): 1 threads didn't exit
[Tue Dec 25 21:09:41 2007] [notice] Child 5228: Child process is exiting
[Tue Dec 25 21:09:42 2007] [notice] Parent: Child process exited successfully.

Thanks for your support.

maybe you get better hints from apache when you stop the service and try to start apache from the console (cmd, "Dos"-window

Hi,

I have run it in the command line and the error i get is because i enable ssl module, as i have paste the what it showed my in the command line below. Please help

--------------------------------------------------------------------------------------------------

C:\wamp\Apache2\bin>dir
Volume in drive C is VAIO
Volume Serial Number is 54A5-8EF0

Directory of C:\wamp\Apache2\bin

24/12/2007 14:49 <DIR> .
24/12/2007 14:49 <DIR> ..
24/12/2007 14:45 1,024 .rnd
10/01/2007 00:20 65,600 ab.exe
10/01/2007 00:20 41,041 ApacheMonitor.exe
10/01/2007 00:23 9,143 dbmmanage.pl
30/08/2007 07:11 417,792 fdftk.dll
30/08/2007 07:11 90,112 fribidi.dll
30/08/2007 07:11 346,624 gds32.dll
10/01/2007 00:20 53,322 htcacheclean.exe
10/01/2007 00:20 77,891 htdbm.exe
10/01/2007 00:20 69,702 htdigest.exe
10/01/2007 00:20 73,798 htpasswd.exe
10/01/2007 00:17 20,539 httpd.exe
21/12/2007 22:47 <DIR> iconv
10/01/2007 00:07 127,049 libapr-1.dll
10/01/2007 00:08 36,948 libapriconv-1.dll
10/01/2007 00:16 168,018 libaprutil-1.dll
30/08/2007 07:11 1,097,728 libeay32.dll
10/01/2007 00:17 266,302 libhttpd.dll
30/08/2007 07:11 166,912 libmcrypt.dll
30/08/2007 07:11 165,643 libmhash.dll
30/08/2007 07:11 2,035,712 libmysql.dll
10/01/2007 00:20 20,552 logresolve.exe
30/08/2007 07:11 57,344 msql.dll
24/12/2007 03:33 561 mywebserver.key
30/08/2007 07:11 278,800 ntwdblib.dll
05/09/2007 08:21 278,597 openssl.exe
28/10/2007 09:47 44,248 php.ini
30/08/2007 07:11 28,731 php5isapi.dll
30/08/2007 07:11 28,731 php5nsapi.dll
30/08/2007 07:11 4,796,472 php5ts.dll
24/12/2007 14:47 951 privkey.pem
10/01/2007 00:20 45,128 rotatelogs.exe
24/12/2007 14:47 773 SSLCertificateFile.cert
24/12/2007 14:49 940 SSLCertificateFile.crt
24/12/2007 14:48 887 SSLCertificateKeyFile.key
30/08/2007 07:11 200,704 ssleay32.dll
10/01/2007 00:20 20,554 wintty.exe
02/05/2007 19:23 360,448 yaz.dll
27/09/2006 16:23 73,783 zlib1.dll
38 File(s) 11,569,104 bytes
3 Dir(s) 1,388,654,592 bytes free

C:\wamp\Apache2\bin>httpd.exe
httpd.exe: Syntax error on line 115 of C:/wamp/Apache2/conf/httpd.conf: Cannot load C:/wamp/Apache2/modules/mod_ssl.so into server
specified module could not be found.

C:\wamp\Apache2\bin>


-----------------------------------------------------------------------------------------------

Thanks.

Hi,

Can you see mod_ssl.so in the subfolder modules or not? According to the error message, it does not seem to be there at all. If you re-install , start Apache, go to the command prompt and do the command:

httpd -t -D DUMP_MODULES

it should show, among all the other modules, the text:

ssl_module (shared)

Possibly the instructions you googled managed somehow to get rid of c:\wamp\Apache2\modules\mod_ssl.so.

Regards,

toivo
Sydney, Australia

Hey,

I have now got the mod_ssl.so, as i had two errors before and they are gone now, as i have ran the command you told me to run so it shows all the loaded modules. As now it shows the module: mod_ssl.co loaded and no errors there or either in the apache_log file. But apache is still not starting when the ssl module is loaded.

Please help, i need this to be working as soon as possible.

Thanks for all the help.

Hi,

I finally reinstalled wamp and did the steps to get ssl to run. But i dnt have access anymore to access localhost or any of my projects it says

403 Forbidden
you dont have permission to access / on this server.

I stop the module ssl and i still get this message. Please help i need this working it so scary without it working and i cnt do any of the work that needs to be done.

Thanks.

Hi,

Here are my notes how I managed to get HTTPS working on Wamp5 in my test environment, meaning my laptop. Those of you who know more about the topic are likely to find numerous grey areas, omissions and inaccuracies, but please point them out :-) The credits go to the guys at [www.apache-ssl.org].

OPENSSL_CONF ENVIRONMENT VARIABLE

Go to Control Panel – System – Advanced – Environment Variables

Add a new system variable OPENSSL_CONF:

Variable name: OPENSSL_CONF
Variable value: c:\wamp\Apache2\conf\openssl.cnf

Log out and log back in.

Go to the command prompt and type in:

set | more

Make sure you see the following line among the environment variables:
OPENSSL_CONF=c:\wamp\Apache2\conf\openssl.cnf


GENERATE KEY

Again in the command prompt, go to C:\wamp\Apache2\bin and run the following command:

openssl req -new > webserver.csr

The command runs and prompts you to enter a PEM pass phrase and verify it. Write down the phrase because you will need it later.

It will then ask you to enter information that will be incorporated into your certificate request. When the command finishes, it has created several files, including privkey.pem, in c:\wamp\apache2\bin.

REMOVE PASSPHRASE

Run the following command:

openssl rsa -in privkey.pem -out webserver.key

You will be prompted for the pass phrase from the previous step. The RSA key is written and the file webserver.key is now available in the folder.

CONVERT INTO SIGNED CERTIFICATE

Run the following command to create a certificate which expires after one year:

openssl x509 -in webserver.csr -out webserver.cert -req -signkey webserver.key -days 365


STORE CERTIFICATE FILES

Create a folder c:\wamp\OpenSSL with the following subfolders:

certs
crl
newcerts
private

Copy the following files to certs:

webserver.cert
webserver.csr
webserver.key

Copy the following files to private:

.rnd
privkey.pem
cacert.pem (same as above, just a wild guess)


MODIFY HTTPD-SSL.CONF

Change the following lines, adjusting the email address and the paths to your settings:

SSLSessionCache "shmcb:C:/wamp/Apache2/logs/ssl_scache(512000)"

SSLMutex default

# General setup for the virtual host
DocumentRoot "C:/www/mysecuresite"
ServerName localhost:443
ServerAdmin myemail@example.com
ErrorLog "C:/wamp/logs/mysecuresite_error_log"
TransferLog "C:/wamp/logs/mysecuresite_access_log"

SSLCertificateFile "C:/wamp/OpenSSL/certs/webserver.cert"

SSLCertificateKeyFile "C:/wamp/OpenSSL/certs/webserver.key"

SSLCARevocationPath "C:/wamp/OpenSSL/crl"

<Directory "C:/wamp/Apache2/cgi-bin">

CustomLog "C:/wamp/logs/ssl_request_log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"



MODIFY OPENSSL.CNF

There is a file openssl.cnf in c:\wamp\Apache2\conf even though no extension is shown in Windows Explorer. Go to the DOS command prompt and run DIR to see the file extension. Make a backup copy of this file first and rename it in DOS to openssl.cnf.txt so that you can edit it.

Modify the base directory:

dir = c:/wamp/OpenSSL # Where everything is kept

Go to the DOS prompt and change the name of the file back to openssl.cnf.


MODIFY HTTPD.CONF

Last, but not least, make sure your secure site is part of the virtual hosts in Apache:

# Secure (SSL/TLS) connections
#Include conf/extra/httpd-ssl.conf
Include conf/extra/httpd-ssl.conf


TEST HTTPS

Run httpd –t and make sure the syntax is OK.

Restart Apache.

Check that port 443 is open by running the following in the command prompt:

netstat -an | more


Test the https connection from your browser and hopefully it works :-)



CLIENT CERTIFICATES

For details on how to generate a client certificate see the instructions at [www.apache-ssl.org]



Regards,

toivo
Sydney, Australia



Edited 2 time(s). Last edit at 02/11/2008 10:00PM by toivo.

Hi,

Thanks for all the help that was provided, i have now resolved the issue with SSL and hopefully it will all work as i wanted it too. Happy New Year people, have a great day.

Thanks alot.

Thanks, toivo, for all your work. It took me a very long time trying to figure this out on my own from various snippets of information from Google searches that were either obsolete or which had errors. Though I finally got it working I could have had it done in an hour if I had read your step-by-step guide. It is good you mentioned setting SSLMutex to default.


Suggestion: You really should turn on extensions in Windows Explorer (Tools - Folder Options - View). There is no good reason for it to be the default setting.

Thanks for the positive comments. Regarding the option to see the Windows file extensions, it is a setting I always turn on in a new profile. In spite of this setting, Windows does not display the extension if it is .cnf. Create a new file, call it test.cnf and the file name is displayed as test :-)

Regards,

toivo
Sydney, Australia

Hi!
I followed all the steps mentioned above by Toivo,i'm having a problem with the wamp server when i modify my HTTPD.CONF file.The icon becomes yellow n nothing works.But if i undo the changes the wamp server is ok.
I'm not sure how to check if my site is part of virtual hosts in Apache.I have just placed my folder in the www folder.Is there anything else that i should do to make sure my site is part of virtual hosts in Apache?


MODIFY HTTPD.CONF.

Last, but not least, make sure your secure site is part of the virtual hosts in Apache:-->i'm not sure abt this as mentioned above.

# Secure (SSL/TLS) connections
#Include conf/extra/httpd-ssl.conf
Include conf/extra/httpd-ssl.conf------>this is the line with which my server goes off



And when i try to test HTTPS by running the command httpd -t i get a syntax error in the file httpd-ssl.conf
it says

Invalid command 'SSLPassPhraseDialog',perhaps mispelled or defined by a module not included in the server configuration.


Can anyone please help figure this out.I know it's some thing trivial,but i'm not able to get it.i need to get my work going at the earlliest.

Thank you,
Nirupama

Hi,

I noticed that the section about the environmental variable in my instructions refers to a user variable. It should be SYSTEM variable. I have edited the post now, but here is the updated section:

OPENSSL_CONF ENVIRONMENT VARIABLE

Go to Control Panel – System – Advanced – Environment Variables

Add a new system variable OPENSSL_CONF:

I hope this helps. I have it working on Windows XP and enabled in Windows Server 2003 Standard Edition, too.

Regards,

toivo
Sydney, Australia

> Include conf/extra/httpd-ssl.conf------>this is the line with which my server goes off

One thing I seem to remember was that httpd-ssl.conf is littered with hard-coded locations not appropriate for a WAMP installation. So, when you include httpd-ssl.conf in httpd.conf it inherits those errors. The line in question on my system says "SSLPassPhraseDialog builtin" but I don't know what it should be.

For those having the issue with the "SSLPassPhraseDialog builtin" line being invalid, here's how I fixed it. I followed the directions above, and also go this error at first.

In the file httpd.conf, you're adding the line:

Include ./conf/extra/httpd-ssl.conf

I assumed at the end, after the last line in my file (wamp2) which is:

Include "D:/webserve_local/wamp/alias/*"

just above that though, it says:

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

I haven't used SSL yet, so that module wasn't enabled. So it's failing because it's not loaded. So I changed:

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

to:

<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
Include conf/extra/httpd-ssl.conf
</IfModule>

So it would only use ssl if it was enabled. Then using the wamp systray icon, enabled the ssl module:

Apache > Apache modules > ssl_module

It'll probably be at the end in that menu, it should be checked if it's on.

After that, wamp started fine and everything works like it should.