Quantcast
Channel: Active questions tagged https - Stack Overflow
Viewing all articles
Browse latest Browse all 1793

Set up localhost https using mkcert [closed]

$
0
0

I am struggling trying to get https working on my development site having moved to a new m/c.I am running Ubuntu 24 as a virtual m/c under Windows 11 Hyper-V host.So far....Installed mkcert and ran mkcert -install, loaded the resulting rootCA.pem into Firefox "Authorities" where it lists as a "Security Device"Ran mkcert localhost to generate localhost.pem and localhost-key.pemChanged my apache2 conf file (default-ssl.conf) as follows

<VirtualHost *:80>    ServerAdmin norman.bearon@live.co.uk    ServerName localhost    DocumentRoot /var/www/html/Saraband</VirtualHost><IfModule mod_ssl.c><VirtualHost *:443>    ServerAdmin norman.bearon@live.co.uk    ServerName localhost    ServerAlias 192.168.1.100    DocumentRoot /var/www/html/Saraband    ErrorLog ${APACHE_LOG_DIR}/error.log    CustomLog ${APACHE_LOG_DIR}/access.log combined    SSLEngine on    SSLCertificateFile  /home/norman/MkCerts/localhost.pem      SSLCertificateKeyFile   /home/norman/MkCerts/localhost-key.pem<FilesMatch "\.(cgi|shtml|phtml|php)$">        SSLOptions +StdEnvVars</FilesMatch><Directory /usr/lib/cgi-bin>        SSLOptions +StdEnvVars</Directory></VirtualHost></IfModule>

http access works fine!https not so

Tried to load .pem file into Firefox "Your Certificates" but it would not accept, reading around I combined it with the key file as follows:

openssl pkcs12 -export -in localhost.pem -inkey localhost-key.pem -out localhost.p12

I was then able to load the resulting .p12 int Firefox

No joy trying to access https://localhostSimply get "unable to connect"Expanded inf just says:

Website: localhostOwner: This website does not supply ownership informationVerified By: not specifiedConnection not encryptedThe Website localhost does not support encryption for the page you are viewing

It looks to me as though the certificate files are not being picked up at all. The .conf file is pretty well identical to that on my old development m/c where it works perfectly (different certificate files of course - I cannot now remember how they were generated, but probably directly via openssl)

I have carefully checked all relevant file and directory permissions and compared them with the old m/c. Main difference is that this time everything is owned my user (me) rather than root - permissions however are the same as far as I can see.

Suggestions welcome! I must be missing something!

Thanks


Viewing all articles
Browse latest Browse all 1793

Latest Images

Trending Articles

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>