Blog Support

XAMPP SSL Configuration and Installation Guide for Windows

Sometimes you need to install an SSL certificate in your local development environment to ensure that all code works perfectly and there are no errors due to security reasons. Additionally, the same SSL Certificate can be used to secure your deployed website provided you have the same CSR and Private Key. XAMPP (Cross Platform, Apache, MariaDB, PHP, Perl) is an open-source cross-platform web server solution stack package developed by Apache Friends. XAMPP makes sure that the transition from your local environment to the web is seamless and easy to implement.

Video to Install SSL/TLS for XAMP
Play Video

Video to Install SSL/TLS for XAMP

Pre-requisites:-

Make sure you have a valid domain name and a DNS Service to validate the certificate.

Step 1. Generating a CSR and Private Key

Head over to SSLTrust's CSR Generator and generate your Certificate Signing Request and Private Key.
Make sure that you save your Private Key and CSR locally on your device in a .txt file. By doing so, you can make sure that you can re-install the certificate in case of any error.

Step 2. Order and Configure the SSL Certificate

The next step in the installation process is to order an SSL Certificate. If you visit our SSL Certificates List page, you will have a number of options available, such as a low-cost domain-validated SSL or a multi-domain SSL.

SSL certificates vary in pricing based on the level of validation they provide. Domain Validated (DV) certificates are typically the least expensive as they only verify domain ownership.

Cheap SSL Certificates

View our low cost SSL Certificates with domain validation.

Starting at $ per year

Wildcard SSL

View our Wildcard Certificates to Secure Unlimited Sub-domains.

Starting at $ per year

Business Certificates

View our Business Certificates to secure and verify your business.

Starting at $ per year

If you require any assistance with selecting an SSL Certificate, please feel free to contact our sales team and they will be happy to assist.

1: Order the SSL and complete the checkout.

2: Once you have completed the SSL Certificate Purchase you can begin the configuration process. This can be started by going into your SSLTrust account and managing your recent purchase.

manage ssl

You then will need to click the Submit Configuration button to begin the configuration process.

submit ssl configuration

3: You now need to paste in the CSR you previously generated. This includes the lines:

text

-----BEGIN CERTIFICATE REQUEST----
  -----END CERTIFICATE REQUEST-----
configure SSL

Select Apache for your Web Server Type.

ssl admin details

You will need to also enter the Site Administrator Contact Information.

This information is to be of the individual who is responsible to approve and SSL Certificate. If it is a business SSL, it needs to be a contact under the business.

The Technical Contact Information is the details of the individual responsible for the installation and management of the Certificate.
If you have ordered a business SSL, you will also be required to enter your business details. These should be the correct address and phone number and legal entity name. They will be required to be validated by the Certificate Authority, any mistakes will cause delays. More information on Business Validation can be found here.

4: Click Continue to go to the next Step. Here you need to select the Authentication Method to validate your domain name. This is required to prove you own the domain name and have permission to issue an SSL Certificate for the domain.

select domain validation method

Select the method that will be the easiest for you to use; File-Based Authentication ( HTTP / HTTPS ), CNAME Based Authentication ( DNS ) or Certificate Approver Email.

If you have access to one of the listed emails, this can be the quickest method

Click Continue/Submit to finish the Configuration process.

After you complete the domain validation via your selected method, your SSL will be issued. If you ordered a Business SSL, you will need to wait for the Certificate Authority to complete the Business address and phone validation. If the validation has not progressed, or you have not received your Certificate after some time, please contact our support team so we can check on its status.

sectigo validation manager

Step 3. Download the SSL Certificate files and move them to the XAMPP

When your SSL Certificate has been issued, you will be emailed the Certificate Directly from the Certificate Authority. You can also download it from your SSLTrust Portal. Downloading it from the SSLTrust Portal is a good option as we format the certificate in an easy to use way.

Again; View your certificate management page within SSLTrust

manage ssl

1: Click on the Manage button and collect/download your certificate

download ssl

2: Select the format as "separate primary and intermediate .crt files (zipped)" and download your certificate

3: Once you've downloaded and extracted the certificates, open them both with your preferred editor and combine both certificates into one file. Make sure that the primary certficate comes first and then the intermediate certificate. Installing an intermediate certificate makes sure that there are no security warnings on your website. Additionally, it makes for best SSL practices and makes your site more secure.

4: Copy and paste the combined certificate file and the private key in

text

"X:\xampp\apache\conf\ssl"

Note:- Create an ssl folder if necessary and make sure your replace "X:" with the drive you installed XAMPP in.

Step 4. Add the site in Windows Hosts

1: Navigate to C:\Windows\System32\drivers\etc\hosts (the file has no extension)
2: Add this at the bottom of the file:

text

127.0.0.1 yourdomain.com

This command points Localhost to http://yourdomain.com locally and displays the default XAMPP Dashboard Page.

XAMPP Dashboard Page

Step 5. Edit the SSL Configuration file for Apache

We need to let the Apache Webserver know where we store the SSL Certificate file. Navigate to "C:\xampp\apache\conf\extra\httpd-xampp.conf". You can either use the XAMPP interface or File Explorer to find the configuration file. Find and change the following directives:-

text

ServerName yourdomain.com
ServerAlias www.yourdomain.com
SSLCertificateFile "path-to-combined-certificate"
SSLCertificateKeyFile "path-to-private-key"

Note:- I've used a different path for the certificate and private key in this step. Please make sure to specify the correct path to both the files.
Your path should look like somewhat like:-

text

"X:\xampp\apache\conf\ssl\certicate.crt"
  "X:\xampp\apache\conf\ssl\private.key"



Step 6. Restart XAMPP Apache WebServer

Stop and then Start the Apache Webserver via the XAMPP Control Panel to restart your server and implement all changes. That's it, you should have now successfully installed an SSL Certificate on XAMPP. Head over to https://yourdomain.com:443 and check your secure connection.

Step 7. Check SSL Certificate

SSLTrust's Free SSL Checker is a tool that allows you to test and validate the SSL/TLS certificates installed on websites. Simply enter a domain name and it will analyze the certificate, providing details like the issuer, expiration date, encryption strength, and whether the certificate is properly configured and trusted by major browsers and operating systems. In SSL tests, receiving an "A" rating typically signifies that the SSL certificate and its configuration meet high security standards.

SSLTrust Free SSL Checker A Rating

The checker highlights any potential security issues or misconfigurations with the SSL implementation. This free tool makes it easy to verify if a website's SSL certificate is valid and secure, giving visitors confidence their connection is encrypted and their data is protected from eavesdroppers.

SSLTrust Free SSL Checker Detailed Report Example Drop Down

Additionally, you can also performed a detailed check which generates an actionable report with all the ins and out of your SSL Certificate. This includes Protocols, Ciphers, Vulnerabilities and much more.

SSLTrust Free SSL Checker Detailed Report

-

You might require assistance from your web developer or make the necessary updates to your website personally to ensure that all files utilize "https://" and all links leading to and within your website employ "https://".


Discussions and Comments

Click here to view and join in on any discussions and comments on this article.

Written by
Siddiqui Ammar


Helpful Guides

View more Guides, FAQs and information to help with your Certificate purchases.

Learning Centre

View more resources on cyber security, encryption and the internet.


Continue reading with these guides you may be interested in...

#SSL/TLS

Apache RedHat Linux (RHEL) SSL Installation Guide

Video Included

Red Hat Enterprise Linux (RHEL) is a Linux-based operating system from Red Hat designed for organizations. RHEL can work on desktops, on servers, in hypervisors or in the cloud. Red Hat and its community-supported counterpart, Fedora, are among the …

#SSL/TLS

Webuzo SSL/TLS Installation Guide

Video Included

Webuzo - powered by Softaculous is a Single User Control Panel, which helps to deploy apps and more on the server. It can enable people to focus more on using applications rather than run around the clock maintaining them. This guide will go through …

#SSL/TLS

VestaCP SSL Configuration and Installation Guide

Video Included

Vesta Control Panel or Vesta CP- powered by Softaculous is an open source hosting control panel, which can be used to manage multiple websites, create and manage email accounts, FTP accounts, and MySQL databases, manage DNS records and much more. …