Adding SSL (Secure Sockets Layer) to XAMPP allows you to enable HTTPS for secure web communication. This guide will walk you through the process of configuring SSL in XAMPP on Windows.

Step 1: Obtain an SSL Certificate

To enable SSL, you need an SSL certificate. You can either:

1. Generate a Self-Signed SSL Certificate (for local development).
2. Obtain a Free SSL Certificate (from Let’s Encrypt or another CA).
3. Purchase an SSL Certificate (for production use).

Step 2: Place the SSL Certificate Files in XAMPP

Once you have the required files, move them to the Apache SSL directory in XAMPP:

📂 Path: C:\xampp\apache\ssl\

Ensure you have the following files:

• domain.crt → SSL certificate file
• domain.key → Private key file
• domain.ca-bundle (if applicable) → CA chain file

Step 3: Configure Apache for SSL

Now, configure Apache to use SSL by editing the httpd-ssl.conf file.

📂 Open: C:\xampp\apache\conf\extra\httpd-ssl.conf

Find the existing <VirtualHost _default_:443> section and replace or modify it with the following configuration:

<VirtualHost *:443>
    DocumentRoot "C:/xampp/htdocs"
    ServerName domain.com:443

    SSLEngine On
    SSLCertificateFile "C:/xampp/apache/ssl/domain.crt"
    SSLCertificateKeyFile "C:/xampp/apache/ssl/domain.key"
    SSLCACertificateFile "C:/xampp/apache/ssl/domain.ca-bundle"

    <Directory "C:/xampp/htdocs">
        Require all granted
        AllowOverride All
    </Directory>
</VirtualHost>

Explanation of Configuration

• DocumentRoot "C:/xampp/htdocs" → Sets the root folder for your website.
• ServerName domain.com:443 → Specifies the domain name. Replace domain.com with your actual domain.
• SSLEngine On → Enables SSL.
• SSLCertificateFile → Path to the SSL certificate.
• SSLCertificateKeyFile → Path to the private key.
• SSLCACertificateFile → Path to the certificate authority (CA) bundle (only if required).

💡 Tip: Use forward slashes (/) in paths to avoid Apache errors.

Step 4: Enable SSL Module in XAMPP

Before restarting Apache, ensure SSL is enabled in XAMPP:

1️⃣ Open C:\xampp\apache\conf\httpd.conf.
2️⃣ Find and uncomment (remove #) the following lines:

LoadModule ssl_module modules/mod_ssl.so
Include conf/extra/httpd-ssl.conf

---

Step 5: Restart Apache

After making the changes:

1. Open XAMPP Control Panel
2. Click Stop on Apache
3. Click Start on Apache

If everything is configured correctly, Apache should start without errors.

---

Step 6: Access Your Website with HTTPS

Now, open your browser and enter:

https://domain.com

If using a self-signed certificate, your browser may show a security warning. You can proceed by clicking “Advanced” → “Proceed Anyway” (for local development).

---

Optional: Force Redirect HTTP to HTTPS

To automatically redirect all HTTP traffic to HTTPS, edit your .htaccess file in C:/xampp/htdocs/ and add:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]

This ensures all visitors use HTTPS.

---

Final Thoughts

By following these steps, you have successfully enabled SSL on XAMPP for secure HTTPS access. This helps in testing secure applications before deploying them to a live server.

🔹 Key Takeaways:

✅ XAMPP supports SSL for secure local development
✅ Configure Apache to use SSL certificates
✅ Enable HTTPS by modifying httpd-ssl.conf
✅ Redirect HTTP to HTTPS using .htaccess