Passer WAMPSERVER en HTTPS

Passer WAMPSERVER en HTTPS - Réseaux - Réseaux grand public / SoHo

Marsh Posté le 23-06-2023 à 10:56:20    

Bonjour
Je viens demander ici en désespoir de cause.
J'ai fait tous les tutos, tous les topics et je plante toujours pour acceder à mon site en https
 
Je vais essayer de faire un copier coller de mes fichiers pour vous montrer
Je suis sous Windows avec un serveur Wampserver64 version Apache 2.4.41
Toute aide serait extrêmement appréciée.
 
En local quand j'essaye d'acceder au site via SSL , j'ai ce message :
 
Ce site ne peut pas fournir de connexion sécurisée
 
Dans Apache/conf/cert j'ai généré un fichier .RND
Dans Apache/conf/key j'ai un fichier private.key
Dans Apache/conf/ssl j'ai le certificat et son fichier .KEY
 
 
 
 
 
 
Httpd.conf ==>
 

Code :
  1. # Listen: Allows you to bind Apache to specific IP addresses and/or
  2. # ports, instead of the default. See also the <VirtualHost>
  3. # directive.
  4. #
  5. # Change this to Listen on specific IP addresses as shown below to
  6. # prevent Apache from glomming onto all bound IP addresses.
  7. #
  8. #Listen 12.34.56.78:80
  9. Listen 0.0.0.0:80
  10. Listen 0.0.0.0:443
  11. ### celui-ci permet de passer mais ca ne marche que en local
  12. Listen [:0]:80
  13. Listen [:0]:443
  15. LoadModule access_compat_module modules/mod_access_compat.so
  16. LoadModule actions_module modules/mod_actions.so
  17. LoadModule alias_module modules/mod_alias.so
  18. LoadModule allowmethods_module modules/mod_allowmethods.so
  19. LoadModule asis_module modules/mod_asis.so
  20. LoadModule auth_basic_module modules/mod_auth_basic.so
  21. LoadModule auth_digest_module modules/mod_auth_digest.so
  22. LoadModule authn_core_module modules/mod_authn_core.so
  23. LoadModule authn_file_module modules/mod_authn_file.so
  24. LoadModule authz_core_module modules/mod_authz_core.so
  25. LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
  26. LoadModule authz_host_module modules/mod_authz_host.so
  27. LoadModule authz_user_module modules/mod_authz_user.so
  28. LoadModule autoindex_module modules/mod_autoindex.so
  29. LoadModule cache_module modules/mod_cache.so
  30. LoadModule cache_disk_module modules/mod_cache_disk.so
  31. LoadModule dir_module modules/mod_dir.so
  32. LoadModule env_module modules/mod_env.so
  33. LoadModule file_cache_module modules/mod_file_cache.so
  34. LoadModule include_module modules/mod_include.so
  35. LoadModule isapi_module modules/mod_isapi.so
  36. LoadModule log_config_module modules/mod_log_config.so
  37. LoadModule mime_module modules/mod_mime.so
  38. #LoadModule mime_magic_module modules/mod_mime_magic.so
  39. LoadModule negotiation_module modules/mod_negotiation.so
  40. LoadModule rewrite_module modules/mod_rewrite.so
  41. #LoadModule session_crypto_module modules/mod_session_crypto.so
  42. #LoadModule session_dbd_module modules/mod_session_dbd.so
  43. LoadModule setenvif_module modules/mod_setenvif.so
  44. ###### ci dessous decoché
  45. LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
  46. LoadModule ssl_module modules/mod_ssl.so
  47. LoadModule userdir_module modules/mod_userdir.so
  48. LoadModule vhost_alias_module modules/mod_vhost_alias.so
  51. PHPIniDir "${APACHE_DIR}/bin"
  52. LoadModule php7_module "${INSTALL_DIR}/bin/php/php7.4.0/php7apache2_4.dll"
  54. <IfModule unixd_module>
  55. #
  56. # If you wish httpd to run as a different user or group, you must run
  57. # httpd as root initially and it will switch.
  58. #
  59. # User/Group: The name (or #number) of the user/group to run httpd as.
  60. # It is usually good practice to create a dedicated user and group for
  61. # running httpd, as with most system services.
  62. #
  63. User daemon
  64. Group daemon
  66. </IfModule>
  68. # 'Main' server configuration
  69. #
  70. # The directives in this section set up the values used by the 'main'
  71. # server, which responds to any requests that aren't handled by a
  72. # <VirtualHost> definition.  These values also provide defaults for
  73. # any <VirtualHost> containers you may define later in the file.
  74. #
  75. # All of these directives may appear inside <VirtualHost> containers,
  76. # in which case these default settings will be overridden for the
  77. # virtual host being defined.
  78. #
  80. ServerName localhost:80
  83. <Files "*.*">
  84.    order allow,deny
  85. allow from all
  86. </Files>
  88. <Directory />
  89.     AllowOverride none
  90. #    Require all denied
  91.     Require all granted
  92. </Directory>
  94. HostnameLookups Off
  96. DocumentRoot "${INSTALL_DIR}/www"
  97. <Directory "${INSTALL_DIR}/www/">
  98.     Options +Indexes +FollowSymLinks +Multiviews
  100.     AllowOverride all
  102. #   onlineoffline tag - don't remove
  103. #    Require local
  104. Require all granted
  105. </Directory>
  107. <IfModule dir_module>
  108.     DirectoryIndex index.php index.php3 index.html index.htm
  109. </IfModule>
  111. #
  112. # The following lines prevent .htaccess and .htpasswd files from being
  113. # viewed by Web clients.
  114. #
  115. <Files ".ht*">
  116.     Require all denied
  117. </Files>
  119. ErrorLog "${INSTALL_DIR}/logs/apache_error.log"
  121. LogLevel warn
  123. <IfModule log_config_module>
  124.     LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
  125.     LogFormat "%h %l %u %t \"%r\" %>s %b" common
  127.     <IfModule logio_module>
  128.       # You need to enable mod_logio.c to use %I and %O
  129.       LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
  130.     </IfModule>
  132.     CustomLog "${INSTALL_DIR}/logs/access.log" common
  133. </IfModule>
  135. <IfModule alias_module>
  136.     ScriptAlias /cgi-bin/ "${SRVROOT}/cgi-bin/"
  138. </IfModule>
  140. <IfModule cgid_module>
  141. </IfModule>
  143. <Directory "${SRVROOT}/cgi-bin">
  144.     AllowOverride None
  145.     Options None
  146.     Require all granted
  147. </Directory>
  149. <IfModule headers_module>
  150.     RequestHeader unset Proxy early
  151. </IfModule>
  153. <IfModule mime_module>
  154.     #
  155.     # TypesConfig points to the file containing the list of mappings from
  156.     # filename extension to MIME-type.
  157.     #
  158.     TypesConfig conf/mime.types
  160.     #
  161.     # AddEncoding allows you to have certain browsers uncompress
  162.     # information on the fly. Note: Not all browsers support this.
  163.     #
  164.     AddEncoding x-compress .Z
  165.     AddEncoding x-gzip .gz .tgz
  166.     #
  167.     # If the AddEncoding directives above are commented-out, then you
  168.     # probably should define those extensions to indicate media types:
  169.     #
  170.     AddType application/x-compress .Z
  171.     AddType application/x-gzip .gz .tgz
  172.     AddType application/x-httpd-php .php
  173.     AddType application/x-httpd-php .php3
  175.     # AddHandler allows you to map certain file extensions to "handlers":
  176.     # actions unrelated to filetype. These can be either built into the server
  177.     # or added with the Action directive (see below)
  178.     #
  179.     # To use CGI scripts outside of ScriptAliased directories:
  180.     # (You will also need to add "ExecCGI" to the "Options" directive.)
  181.     #
  182.     #AddHandler cgi-script .cgi
  184.     # For type maps (negotiated resources):
  185.     #AddHandler type-map var
  187.     #
  188.     # Filters allow you to process content before it is sent to the client.
  189.     #
  190.     # To parse .shtml files for server-side includes (SSI):
  191.     # (You will also need to add "Includes" to the "Options" directive.)
  192.     #
  193.     #AddType text/html .shtml
  194.     #AddOutputFilter INCLUDES .shtml
  195. </IfModule>
  197. #
  198. # The mod_mime_magic module allows the server to use various hints from the
  199. # contents of the file itself to determine its type.  The MIMEMagicFile
  200. # directive tells the module where the hint definitions are located.
  201. #
  202. #MIMEMagicFile conf/magic
  204. #
  205. # MaxRanges: Maximum number of Ranges in a request before
  206. # returning the entire resource, or one of the special
  207. # values 'default', 'none' or 'unlimited'.
  208. # Default setting is to accept 200 Ranges.
  209. #MaxRanges unlimited
  212. # Defaults: EnableMMAP On, EnableSendfile Off
  213. #
  214. #EnableMMAP off
  215. EnableSendfile off
  217. # AcceptFilter: On Windows, none uses accept() rather than AcceptEx() and
  218. # will not recycle sockets between connections. This is useful for network
  219. # adapters with broken driver support, as well as some virtual network
  220. # providers such as vpn drivers, or spam, virus or spyware filters.
  221. AcceptFilter http none
  222. AcceptFilter https none
  225. # Server-pool management (MPM specific)
  226. Include conf/extra/httpd-mpm.conf
  228. # Multi-language error messages
  229. #Include conf/extra/httpd-multilang-errordoc.conf
  231. # Fancy directory listings
  232. Include conf/extra/httpd-autoindex.conf
  234. # Language settings
  235. #Include conf/extra/httpd-languages.conf
  237. # User home directories
  238. #Include conf/extra/httpd-userdir.conf
  240. # Real-time info on requests and configuration
  241. #Include conf/extra/httpd-info.conf
  243. # Virtual hosts
  244. Include conf/extra/httpd-vhosts.conf
  246. # Local access to the Apache HTTP Server Manual
  247. #Include conf/extra/httpd-manual.conf
  249. # Distributed authoring and versioning (WebDAV)
  250. #Include conf/extra/httpd-dav.conf
  252. # Various default settings
  253. #Include conf/extra/httpd-default.conf
  255. # Configure mod_proxy_html to understand HTML4/XHTML1
  256. <IfModule proxy_html_module>
  257. Include conf/extra/proxy-html.conf
  258. </IfModule>
  260. # Secure (SSL/TLS) connections
  262. # j'ai essayé mais ça plante ==>
  263. #Include conf/extra/httpd-ssl.conf
  264. #
  265. # Note: The following must must be present to support
  266. #       starting without SSL on platforms with no /dev/random equivalent
  267. #       but a statically compiled-in mod_ssl.
  268. #
  269. <IfModule ssl_module>
  270. SSLRandomSeed startup builtin
  271. SSLRandomSeed connect builtin
  272. </IfModule>
  274. Include "${INSTALL_DIR}/alias/*"


 
Httpd-ssl.conf ==>
 

Code :
  1. #
  2. # This is the Apache server configuration file providing SSL support.
  3. # It contains the configuration directives to instruct the server how to
  4. # serve pages over an https connection. For detailed information about these
  5. # directives see <URL:http://httpd.apache.org/docs/2.4/mod/mod_ssl.html>
  6. #
  7. # Do NOT simply read the instructions in here without understanding
  8. # what they do.  They're here only as hints or reminders.  If you are unsure
  9. # consult the online docs. You have been warned. 
  10. #
  11. # Required modules: mod_log_config, mod_setenvif, mod_ssl,
  12. ###### retiré
  13.           socache_shmcb_module (for default value of SSLSessionCache)
  15. #
  16. # Pseudo Random Number Generator (PRNG):
  18. #SSLRandomSeed startup file:/dev/random  512
  19. #SSLRandomSeed startup file:/dev/urandom 512
  20. #SSLRandomSeed connect file:/dev/random  512
  21. #SSLRandomSeed connect file:/dev/urandom 512
  24. #
  25. # When we also provide SSL we have to listen to the
  26. # standard HTTP port (see above) and to the HTTPS port
  27. #
  28. Listen 443
  30. ##
  31. ##  SSL Global Context
  32. ##
  33. ##  All SSL configuration in this context applies both to
  34. ##  the main server and all SSL-enabled virtual hosts.
  35. ##
  37. SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
  38. SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
  40. # SSLCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA
  41. # SSLProxyCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA
  43. #   User agents such as web browsers are not configured for the user's
  44. #   own preference of either security or performance, therefore this
  45. #   must be the prerogative of the web server administrator who manages
  46. #   cpu load versus confidentiality, so enforce the server's cipher order.
  47. SSLHonorCipherOrder on
  49. #   SSL Protocol support:
  50. SSLProtocol all -SSLv3
  51. SSLProxyProtocol all -SSLv3
  53. #   Pass Phrase Dialog:
  54. #   Configure the pass phrase gathering process.
  55. #   The filtering dialog program (`builtin' is an internal
  56. #   terminal dialog) has to provide the pass phrase on stdout.
  57. SSLPassPhraseDialog  builtin
  59. #   Inter-Process Session Cache:
  60. #   Configure the SSL Session Cache: First the mechanism
  61. #   to use and second the expiring timeout (in seconds).
  62. SSLSessionCache "shmcb:***************/apache2.4.41/conf/ssl/logs/ssl_scache(512000)"
  64. SSLSessionCacheTimeout  300
  66. #   Enable stapling for all SSL-enabled servers:
  67. #SSLUseStapling On
  69. #   Define a relatively small cache for OCSP Stapling using
  70. #   the same mechanism that is used for the SSL session cache
  71. #   above.  If stapling is used with more than a few certificates,
  72. #   the size may need to be increased.  (AH01929 will be logged.)
  73. #SSLStaplingCache "shmcb:${SRVROOT}/logs/ssl_stapling(32768)"
  75. #   Seconds before valid OCSP responses are expired from the cache
  76. #SSLStaplingStandardCacheTimeout 3600
  78. #   Seconds before invalid OCSP responses are expired from the cache
  79. #SSLStaplingErrorCacheTimeout 600
  81. ##
  82. ## SSL Virtual Host Context
  83. ##
  85. <VirtualHost _default_:443>
  87. #   General setup for the virtual host
  88. DocumentRoot "********************/
  89. ServerName localhost:443
  90. ServerAdmin admin@example.com
  91. ErrorLog "*************/apache2.4.41/conf/ssl/logs/ssl_error.log"
  92. TransferLog "********************/apache2.4.41/conf/ssl/logs/ssl_access.log"
  94. #   SSL Engine Switch:
  95. #   Enable/Disable SSL for this virtual host.
  96. SSLEngine on
  98. #   Server Certificate:
  99. #   Point SSLCertificateFile at a PEM encoded certificate.  If
  100. #   the certificate is encrypted, then you will be prompted for a
  101. #   pass phrase.  Note that a kill -HUP will prompt again.  Keep
  102. #   in mind that if you have both an RSA and a DSA certificate you
  103. #   can configure both in parallel (to also allow the use of DSA
  104. #   ciphers, etc.)
  105. #   Some ECC cipher suites (http://www.ietf.org/rfc/rfc4492.txt)
  106. #   require an ECC certificate which can also be configured in
  107. #   parallel.
  108. SSLCertificateFile "********************/apache2.4.41/conf/ssl/localhost.crt"
  109. #SSLCertificateFile "${SRVROOT}/conf/server-dsa.crt"
  110. #SSLCertificateFile "${SRVROOT}/conf/server-ecc.crt"
  112. #   Server Private Key:
  113. #   If the key is not combined with the certificate, use this
  114. #   directive to point at the key file.  Keep in mind that if
  115. #   you've both a RSA and a DSA private key you can configure
  116. #   both in parallel (to also allow the use of DSA ciphers, etc.)
  117. #   ECC keys, when in use, can also be configured in parallel
  118. SSLCertificateKeyFile "***************/apache2.4.41/conf/ssl/localhost.key"
  119. #SSLCertificateKeyFile "${SRVROOT}/conf/server-dsa.key"
  120. #SSLCertificateKeyFile "${SRVROOT}/conf/server-ecc.key"
  122. #   Server Certificate Chain:
  123. #   Point SSLCertificateChainFile at a file containing the
  124. #   concatenation of PEM encoded CA certificates which form the
  125. #   certificate chain for the server certificate. Alternatively
  126. #   the referenced file can be the same as SSLCertificateFile
  127. #   when the CA certificates are directly appended to the server
  128. #   certificate for convenience.
  129. #SSLCertificateChainFile "${SRVROOT}/conf/server-ca.crt"
  131. #   Certificate Authority (CA):
  132. #   Set the CA certificate verification path where to find CA
  133. #   certificates for client authentication or alternatively one
  134. #   huge file containing all of them (file must be PEM encoded)
  135. #   Note: Inside SSLCACertificatePath you need hash symlinks
  136. #         to point to the certificate files. Use the provided
  137. #         Makefile to update the hash symlinks after changes.
  138. #SSLCACertificatePath "${SRVROOT}/conf/ssl.crt"
  139. #SSLCACertificateFile "${SRVROOT}/conf/ssl.crt/ca-bundle.crt"
  141. #   Certificate Revocation Lists (CRL):
  142. #   Set the CA revocation path where to find CA CRLs for client
  143. #   authentication or alternatively one huge file containing all
  144. #   of them (file must be PEM encoded).
  145. #   The CRL checking mode needs to be configured explicitly
  146. #   through SSLCARevocationCheck (defaults to "none" otherwise).
  147. #   Note: Inside SSLCARevocationPath you need hash symlinks
  148. #         to point to the certificate files. Use the provided
  149. #         Makefile to update the hash symlinks after changes.
  150. #SSLCARevocationPath "${SRVROOT}/conf/ssl.crl"
  151. #SSLCARevocationFile "${SRVROOT}/conf/ssl.crl/ca-bundle.crl"
  152. #SSLCARevocationCheck chain
  154. #   Client Authentication (Type):
  155. #   Client certificate verification type and depth.  Types are
  156. #   none, optional, require and optional_no_ca.  Depth is a
  157. #   number which specifies how deeply to verify the certificate
  158. #   issuer chain before deciding the certificate is not valid.
  159. #SSLVerifyClient require
  160. #SSLVerifyDepth  10
  162. #   TLS-SRP mutual authentication:
  163. #   Enable TLS-SRP and set the path to the OpenSSL SRP verifier
  164. #   file (containing login information for SRP user accounts).
  165. #   Requires OpenSSL 1.0.1 or newer. See the mod_ssl FAQ for
  166. #   detailed instructions on creating this file. Example:
  167. #   "openssl srp -srpvfile ${SRVROOT}/conf/passwd.srpv -add username"
  168. #SSLSRPVerifierFile "${SRVROOT}/conf/passwd.srpv"
  170. #   Access Control:
  171. #   With SSLRequire you can do per-directory access control based
  172. #   on arbitrary complex boolean expressions containing server
  173. #   variable checks and other lookup directives.  The syntax is a
  174. #   mixture between C and Perl.  See the mod_ssl documentation
  175. #   for more details.
  176. #<Location />
  177. #SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
  178. #            and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
  179. #            and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
  180. #            and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
  181. #            and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20       ) \
  182. #           or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
  183. #</Location>
  185. #   SSL Engine Options:
  186. #   Set various options for the SSL engine.
  187. #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
  189. <FilesMatch "\.(cgi|shtml|phtml|php)$">
  190.     SSLOptions +StdEnvVars
  191. </FilesMatch>
  192. <Directory "${SRVROOT}/cgi-bin">
  193.     SSLOptions +StdEnvVars
  194. Options Indexes FollowSymLinks MultiViews
  195. AllowOverride All
  196. Order allow,deny
  197. allow from all
  198. </Directory>
  200. #   SSL Protocol Adjustments:
  201. #   The safe and default but still SSL/TLS standard compliant shutdown
  202. #   approach is that mod_ssl sends the close notify alert but doesn't wait for
  203. #   the close notify alert from client. When you need a different shutdown
  204. #   approach you can use one of the following variables:
  206. #   "force-response-1.0" for this.
  207. BrowserMatch "MSIE [2-5]" \
  208.          nokeepalive ssl-unclean-shutdown \
  209.          downgrade-1.0 force-response-1.0
  211. #   Per-Server Logging:
  212. #   The home of a custom SSL log file. Use this when you want a
  213. #   compact non-error SSL logfile on a virtual host basis.
  214. CustomLog "***************/apache2.4.41/conf/ssl/logs/ssl_request.log" \
  215.           "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
  217. </VirtualHost>


Reply

Marsh Posté le 23-06-2023 à 10:56:20   

Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed