wamp5 开启 ssl

安装环境：Wampserver集成安装包；window7 x64系统。

openssl.exe 所在位置 E:\wamp\bin\apache\apache2.4.9\bin

1.打开cmd,进入openssl.exe所在位置

cd E:\wamp\bin\apache\apache2.4.9\bin  

2.设置配置文件

set OPENSSL_CONF=../conf/openssl.cnf  

3.生成需要的私钥

openssl genrsa > root.key   // 生成根密钥  
openssl genrsa > server.key  // 生成服务端密钥  
openssl genrsa > client.key  // 生成客户端密钥  

4.生成自签名的根证书

openssl req -x509 -new -key root.key > root.crt  
openssl req -new -key server.key -out server.csr  
openssl req -new -key client.key -out client.csr  
Country Name (2 letter code) [AU]:CNISO国家代码（只支持两位字符）  
State or Province Name (full name) [Some-State]:ZJ所在省份  
Locality Name (eg, city) []:HZ所在城市  
Organization Name (eg, company):THS公司名称  
Organizational Unit Name (eg, section) []:THS组织名称  
Common Name (eg, YOUR name) []:localhost(申请证书的域名或IP地址)  
Email Address []:laoniangke@xxx.com管理员邮箱  
   
Please enter the following 'extra' attributes  
to be sent with your certificate request  
A challenge password []:交换密钥  
An optional company name []:  

5.配置openssl.cnf

md demoCA  
md demoCA\newcerts  
md demoCA\private  
cd. > demoCA\index.txt  
echo 01 > demoCA\serial  
echo 01 > demoCA\crlnumber  
openssl genrsa -out demoCA/private/cakey.pem 2048  
openssl req -out demoCA/cacert.pem -x509 -new -key demoCA/private/cakey.pem  

6.使用根证书为服务端及客户端签名

openssl ca -in server.csr -cert root.crt -keyfile root.key -out server.crt  
openssl ca -in client.csr -cert root.crt -keyfile root.key -out client.crt  

7.将客户端证书转成pfx格式，并在浏览器上导入该证书

openssl pkcs12 -export -clcerts -in client.crt -inkey client.key -out client.pfx  

8.配置http.conf，所在位置E:\wamp\bin\apache\apache2.4.9\conf\http.conf，反注释（只列出修改部分）

LoadModule socache_shmcb_module modules/mod_socache_shmcb.so  
LoadModule sslmodule modules/modssl.so  
Include conf/extra/httpd-ssl.conf  

9.配置http-ssl.conf，所在位置E:\wamp\bin\apache\apache2.4.9\conf\extra\http-ssl.conf(只列出修改部分)

SSLSessionCache "shmcb:E:/wamp/logs/ssl_scache"  
Mutex default  
<VirtualHost _default_:443>  
DocumentRoot "E:/wamp/www"  
ServerName localhost:443  
ServerAdmin admin@example.com  
ErrorLog "E:/wamp/logs/apache_error.log"  
TransferLog "E:/wamp/logs/access.log"  
   
SSLEngine on  
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL  
SSLCertificateFile "E:/wamp/bin/apache/apache2.4.9/bin/server.crt"  
SSLCertificateKeyFile "E:/wamp/bin/apache/apache2.4.9/bin/server.key"  
   
SSLCACertificateFile "E:/wamp/bin/apache/apache2.4.9/bin/root.crt"  
SSLVerifyClient require  
SSLVerifyDepth  10  
  
<FilesMatch "\.(cgi|shtml|phtml|php)$">  
    SSLOptions +StdEnvVars +ExportCertData  
</FilesMatch>  
  
CustomLog "E:/wamp/logs/ssl_request.log" \  
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"  
            
</VirtualHost>  

重启 wampserver，如有问题，查看E:\wamp\logs\apache_error.log

如果发现apache 重启不了

后面有问题就到apache的/bin/httpd.exe -t 来看错误
也要看一下是否有程序占用443端口 

I've also enabled "LoadModule status_module modules/mod_status.so" using the following configuration in httpd.conf:

<IfModule status_module>

ExtendedStatus On
<Location /server-status>
    SetHandler server-status
</Location>

</IfModule>

You can check now your server status here

https://localhost/server-status/