Comments on: XAMPP: SSL Encrypt the Transmission of Passwords with https

By: stiffree

stiffree — Wed, 10 Mar 2010 21:34:39 +0000

So good! Thanks alot!

By: charis

charis — Fri, 05 Mar 2010 00:29:58 +0000

thank you so much!

By: aries

aries — Mon, 08 Feb 2010 09:52:18 +0000

Hello everybody, I am setting up a development environment using XAMPP 1.7.3 on Windows 7 for my school project. I have already created a self signed CA, Server and Client certificates and installed the same to IE and Firefox. The CA and Server certificates are working fine. The problem is when I activate the client certificates:
SSLVerifyClient require
SSLVerifyDepth 2)
I get the following error messages:
Secure Connection Failed
An error occurred during a connection to www.buwbcs.com.
SSL peer was unable to negotiate an acceptable set of security parameters.
(Error code: ssl_error_handshake_failure_alert)
What is the possible reason for this error?
IE displays the list of client certificates to select from but Firefox does not.

My httpd.ssl.cnf configuration is as follows:

Listen 443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl

SSLPassPhraseDialog builtin
SSLSessionCache “dbm:logs/ssl.scache”
SSLSessionCacheTimeout 300
SSLMutex default

DocumentRoot “/project/htdocs”
ServerName www.buwbcs.com:443
ServerAdmin webmaster@buwbcs.com
ErrorLog “logs/error.log”

CustomLog “logs/access.log” combined

SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile “conf/ssl.SERVER/bu_SERVER.crt”
SSLCertificateKeyFile “conf/ssl.SERVER/bu_SERVER.key”
SSLCertificateChainFile “conf/ssl.CA/bu_CA.crt”
SSLCACertificatePath “conf/ssl.CA”
SSLCACertificateFile “conf/ssl.CA/bu_CA.crt”

SSLVerifyClient require
SSLVerifyDepth 2

SSLOptions +StdEnvVars

BrowserMatch “.*MSIE.*” nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
CustomLog “logs/ssl_request.log” “%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \”%r\” %b”

Any help in analyzing these and ideas to solve this problem will be highly appreciated.

Thank you in advance.

Aries

By: Roberto Rdguez Glez

Roberto Rdguez Glez — Wed, 03 Feb 2010 14:41:36 +0000

Hola, la verdad es que este artículo es una maravilla. Gracias por todo, hace mucho tiempo buscaba algo parecido y me ha funcionado a la perfección pero tengo un problema.
Cuando hago todos los pasos el servidor general un Certificado SSL para un sitio, quisiera generar uno para cada sitio.
Si me pueden ayudar se lo agradecería.
Saludos

By: bangjampang

bangjampang — Mon, 25 Jan 2010 06:00:15 +0000

hi bro, i just tryed you tutorial and its work fine for me, so i ust want to say a lot of big thanks for you tutorial. you have save my time bro, thanks bro keep up the good work thanks

By: Chairline

Chairline — Tue, 12 Jan 2010 19:58:14 +0000

Hi,

The xammp successfully works and I have done all those configuration except the “SSL”. When I click Start- run - cmd the c:\xampp\apache did not show, instead c:\Documents and Setting\myname

Pls. advise. thanks
Did I miss something? Pls help. I am a newbie.

By: Doan minh giang

Doan minh giang — Sun, 10 Jan 2010 02:50:07 +0000

Thanks alot!

By: Need to create a HTTPS site from home.. - Digital World Cable Satellite Console Forum

Sun, 13 Dec 2009 01:27:24 +0000

[…] Need to create a HTTPS site from home.. this is how to change the password in xampp XAMPP: SSL Encrypt the Transmission of Passwords with https __________________ Guns don’t kill people, people kill […]

By: hdlk

hdlk — Sat, 12 Dec 2009 07:35:29 +0000

Could any one explain to me how to secure folder inside htdoc because i tried many times but it does not work especially when i use SSLRequireSSL

Thank you

By: philip

philip — Fri, 20 Nov 2009 13:34:10 +0000

Cindy, just type in your password, you won’t see the characters, but your password will be inputted!