Cara Mengaktifkan SSL di XAMMP Windows 10 64bit

README.md

Cara Mengaktifkan SSL di XAMPP

Persiapan

1. Download cert-template.conf
2. Download make-cert.bat
3. Buka folder "C:/xampp/apache/" lalu buat folder cert
4. Copy 2 file yang sudah didownload pada folder cert
5. Buka make-cert.bat dan ikuti instruksinya

Konfigurasi

1. Buka file "C:/xampp/apache/conf/extra/httpd-vhosts.conf" dan lihat contoh berikut ini
2. Buka file "C:\Windows\System32\drivers\etc\hosts" dan lihat contoh berikut ini
3. Buka file "C:/xampp/apache/cert/domain.test/server.crt", pilih Install Certificate -> Local Machine -> Place all certificates -> Trusted Root Certification Auhorities -> OK -> Next -> Finish
4. Restart XAMMP atau bila perlu restart windows Anda.

cert-template.conf

[ req ]

default_bits        = 2048
default_keyfile     = server-key.pem
distinguished_name  = subject
req_extensions      = req_ext
x509_extensions     = x509_ext
string_mask         = utf8only

[ subject ]

countryName                 = Country Name (2 letter code)
countryName_default         = US

stateOrProvinceName         = State or Province Name (full name)
stateOrProvinceName_default = NY

localityName                = Locality Name (eg, city)
localityName_default        = New York

organizationName            = Organization Name (eg, company)
organizationName_default    = Example, LLC

commonName                  = Common Name (e.g. server FQDN or YOUR name)
commonName_default          = {{DOMAIN}}

emailAddress                = Email Address
emailAddress_default        = test@example.com

[ x509_ext ]

subjectKeyIdentifier   = hash
authorityKeyIdentifier = keyid,issuer

basicConstraints       = CA:FALSE
keyUsage               = digitalSignature, keyEncipherment
subjectAltName         = @alternate_names
nsComment              = "OpenSSL Generated Certificate"

[ req_ext ]

subjectKeyIdentifier = hash

basicConstraints     = CA:FALSE
keyUsage             = digitalSignature, keyEncipherment
subjectAltName       = @alternate_names
nsComment            = "OpenSSL Generated Certificate"

[ alternate_names ]

DNS.1       = {{DOMAIN}}

hosts

127.0.0.1   localhost
::1         localhost
127.0.0.1   domain.test

httpd-vhosts.conf

<VirtualHost domain.test:80>
	DocumentRoot "C:/xammp/htdocs/domain.test"
	ServerName domain.test
	ServerAlias *.domain.test
	<Directory "C:/xammp/htdocs/domain.test">
		Order allow,deny
	  Allow from all
	</Directory>
	ErrorLog "C:/xammp/htdocs/domain.test/log/error.log"
	CustomLog "C:/xammp/htdocs/domain.test/log/access.log"
</VirtualHost>

<VirtualHost domain.test:443>
	DocumentRoot "C:/xammp/htdocs/domain.test"
	ServerName domain.test
	ServerAlias *.domain.test
	SSLEngine On
	SSLCertificateFile "C:/xampp/apache/cert/domain.test/server.crt"
	SSLCertificateKeyFile "C:/xampp/apache/cert/domain.test/server.key"
	<Directory "C:/xammp/htdocs/domain.test">
		Order allow,deny
		Allow from all
	</Directory>
	ErrorLog "C:/xammp/htdocs/domain.test/log/error.log"
	CustomLog "C:/xammp/htdocs/domain.test/log/access.log"
</VirtualHost>

make-cert.bat

@echo off
set /p domain="Enter Domain: "
set OPENSSL_CONF=../conf/openssl.cnf

REM
REM Read the "cert-template.conf" file and replace all {{DOMAIN}} placeholders by the entered domain.
REM Write the result into a new file called "cert.conf".
REM
REM @see https://stackoverflow.com/questions/5273937/how-to-replace-substrings-in-windows-batch-file#20227248
REM
setlocal enabledelayedexpansion
set INTEXTFILE=cert-template.conf
set OUTTEXTFILE=cert.conf
set SEARCHTEXT={{DOMAIN}}
set REPLACETEXT=%domain%

if exist %OUTTEXTFILE% del /F %OUTTEXTFILE%
for /f "tokens=1,* delims=ΒΆ" %%A in ( '"findstr /n ^^ %INTEXTFILE%"') do (
   SET string=%%A
   for /f "delims=: tokens=1,*" %%a in ("!string!") do set "string=%%b"
   if  "!string!" == "" (
       echo.>>%OUTTEXTFILE%
   ) else (
      SET modified=!string:%SEARCHTEXT%=%REPLACETEXT%!
      echo !modified! >> %OUTTEXTFILE%
  )
)


REM
REM Create the target directory.
REM
if not exist .\%domain% mkdir .\%domain%


REM
REM Create the certificate and key files.
REM
..\bin\openssl req -config %OUTTEXTFILE% -new -sha256 -newkey rsa:2048 -nodes -keyout %domain%\server.key -x509 -days 365 -out %domain%\server.crt


REM
REM Delete the written file "cert.conf" as this file would only be used to create the certificate.
REM
if exist %OUTTEXTFILE% del /F %OUTTEXTFILE%


echo.
echo -----
echo The certificate was provided.
echo.
pause

Mas, aku mau nanya. Yang harus kita isi secara default ketika menjalankan make-cert.bat itu apa saja?
Saya coba isikan secara default semua kecuali commonName sama emailAddress. Apa itu sudah bener ya?

permisi saya coba error 09:50:09 [Apache] Error: Apache shutdown unexpectedly.
09:50:09 [Apache] This may be due to a blocked port, missing dependencies,
09:50:09 [Apache] improper privileges, a crash, or a shutdown by another method.
09:50:09 [Apache] Press the Logs button to view error logs and check
09:50:09 [Apache] the Windows Event Viewer for more clues
09:50:09 [Apache] If you need more help, copy and post this
09:50:09 [Apache] entire log window on the forums