How to Install SSL Certificate in XAMPP For Local Development?

  • Riju
    Riju Ghosh
  • sundew
    5 min.read
  • sundew
    June 27th, 2025
  • Technology
sundew

Setting up SSL in XAMPP ensures your local development environment mimics real-world, secure HTTPS deployments. Learning how to install SSL certificate in XAMPP is a key step to building secure web applications in a local environment. This isn’t just a best practice but often a prerequisite for enabling critical functionalities. Without HTTPS, many modern web features such as APIs, service workers, and secure cookies won’t function as intended, even in a local environment. 

With this guide, you’ll set up HTTPS using either OpenSSL or the easier and trusted mkcert utility, ensuring your development mirrors real-world conditions.

Step-by-Step Guide on How to Install SSL Certificate in XAMPP

There are two straightforward ways to get SSL running in your local XAMPP setup, using the built-in OpenSSL utility or the more user-friendly mkcert tool. Both approaches help you simulate a secure environment for development.

Using OpenSSL utility

Step 1: Create a minimal config file

Step 2: Generate the private key and certificate using the minimal config file

Step 3: Configure Apache to use the certificate

Step 4: Review SSL configuration

Step 5: Verify Apache configuration and check for syntax errors

Step 6: Restart Apache

Using mkcert utility (Recommended)

Step 1: Install mkcert by following the instructions here

Step 2: Generate the certificates

Step 3: Configure Apache to use the generated certificates

Step 4: Review and verify Apache configuration

Step 5: Restart Apache

There are a few browser APIs that require the web page to run in a secure context. For that, we need SSL. Here is how we can configure SSL for Apache in XAMPP. There are two ways to configure the SSL - either using openssl or mkcert

Using OpenSSL utility

This method works properly. However, you won’t be able to see the green padlock icon even after following the steps below. This is intended behavior. To get a green padlock without warnings, you need to add your certificate to the trusted root certificate authorities.

Step 1: Create a minimal config file

Create a new file named openssl_minimal.cnf and add the following content:

Create_a_minimal_config_file

Make sure to replace the placeholder variables with actual values

Save this file in a convenient location, such as C:\xampp\apache\conf\openssl_minimal.cnf

Step 2: Generate the private key and certificate using the minimal config file

2.1 Open terminal and navigate to the OpenSSL directory.

apache_bin

 2.2 Generate a private key. The following command will generate a private key name private.key . Feel free to use any name of your choice.

Generate_a_private_key

2.3 Create a Certificate Signing Request (CSR) file using the minimal config file created earlier. The output file name can be customized.

Certificate_Signing_Request_(CSR)_file

2.4 Generate a self-signed certificate file using the minimal config file. The parameters can be customized.

self_signed_certificate_file

Step 3: Configure Apache to use the certificate

3.1 Copy the generated files to a convenient location inside the Apache folder.

Copy_ generated_files

3.2 Open the httpd-ssl.conf file located in xampp\apache\conf\extra and update the paths.

Configure_apache

The paths are relative to the Apache installation folder.

3.3 Ensure that the following lines are un-commented in the httpd.conf file.

httpd.conf_file

Step 4: Review SSL configuration

Review the VirtualHost setup in the SSL configuration file. Here is a sample of what it might look like.

Review_SSL_configuration

Step 5: Verify Apache configuration and check for syntax errors

5.1 Navigate to xampp\apache\bin

apache_bin

5.2 Check for syntax and other configuration errors using the following command

httpd.exe-t

5.3 If everything is correct you would get the message Syntax OK

Step 6: Restart Apache

Use the XAMPP control panel to restart Apache. Now try accessing localhost via HTTPS. The browser might show a warning about the certificate being self-signed. You may ignore the warning and proceed.

Using mkcert utility (Recommended)

mkcert is a tool to make trusted certificates for local development without any configuration.

Step 1: Install mkcert 

To get started with, first install mkcert by following the instructions here.

Once mkcert is set up, run the below command to install the trusted root store.

Install_mkcert

Step 2: Generate the certificates

mkcert_localhost

The above command will generate two files - localhost.pem and localhost-key.pem

Step 3: Configure Apache to use the generated certificates

3.1 Copy the generated files to a convenient location inside the Apache folder.

copy_the_generated_files_Apache_folder

3.2 Update the httpd-ssl.conf file located in C:\xampp\apache\conf\extra

SSLCertificateFile_Apache

Step 4: Review and verify Apache configuration

Review and verify the Apache configuration using the steps mentioned above (Step 4 and Step 5 of OpenSSL installation).

Step 5: Restart Apache

Restart Apache, and you are good to go. When opened in the browser, the green padlock icon will be visible.

Summing It Up

Now you have two reliable methods to set up HTTPS in your local environment: OpenSSL for a manual approach and mkcert for a quicker, trusted solution. Understanding how to install SSL certificate in XAMPP localhost not only helps you avoid browser security warnings but also ensures that your development environment aligns with modern web standards. 

Secure by default is now the new norm, and that applies to local development too, especially for APIs and full-stack work.

Thoughts and Trends
Across Our Focus Areas

sundew

Blog

5 major differences between Android and iOS App development

Mobile Application Software is a significant investment. If you have an idea that might get smartphone users hooked to your App, for all the good reasons, you will be making Millions! The Mobile Application Market has grown from USD 154.05 billion in 2019 to USD 170.52 billion in 2020 and is expected to reach USD 366.34 billion by 2027.But the one thing that becomes the cause of confusion while looking into Application Development is which platform App Engineers should go with. The presence of two smartphone operating systems - Apple's iOS and Google's Android, makes choosing one a difficult crossroad. There are several advantages and drawbacks associated with both platforms. So before investing your money in the next Revolutionizing Application Software, you might want to choose a firm base for its operation.Here are 5 major differences between iOS and Android App development1. Target Audience- iOS devices are known for their high price value and an overall excellent performance statistic, which inclines the customers' loyalty. On the other hand, Android devices are comparatively cheaper. Hence, an extensive User pool is created, but there are more factors that one must consider while choosing a particular platform.In the plain picture, Android users dominate the iOS users in matters of numbers. While IOS users only take up about 16% of the World's Population, Android users surpass them by 80%. This statistic might support Android users' predominance, but when looking at the data of people who own an iOS device, they have a higher range of income and spend more time on the phone. As a result, these people are more likely to pay for your application services.In terms of User reach - Android dominates the market.But in terms of profit, The Apple App Store has a larger market. "As of 2019, the Apple App Store has earned $155 billion in revenue for its app developers since the store launched in 2008. By comparison, in 2019, Android developers have only earned $80 billion since launch."- Mooc.orgWhile choosing a platform one should analyze two questions:Which audience is the App more specified to? And How are you planning to regain profit via your Application?Cross- Platform Apps - If you are opting for a greater reach, there is another way in which your application will be launched on both of the platforms, aiming for maximum User exposure. Cross-Platform Apps are cheaper than native apps, and they function with better speed and reusable codes. Still, on the other side, they are limited in flexibility and are complicated to process and maintain.2. Programming Language - While analyzing differences between Android Apps and iOS Apps, the most distinctive difference is the usage of different Programming Languages. Android Apps are created via Java or Kotlin programming languages which are more elaborative and complicated, While iOS Apps require the Swift programming language for their development.Swift- Requires lesser inscription of Codes; hence the Coding process is faster and easier. It also allows high-interaction interfaces.Java- Java can develop your Application as a cross-platform app, as it enables you to conduct web development, server work, and mobile app development, all in a single place.3. Development Tools - There are specific development tools for Android and iOS Apps. Android Apps have been created through Android Studio, the primary IDE (Integrated Development Environment) for native Android application development, since 2014. The free software launched by Google functions as an intelligent code editor and encompasses the features of Code templates and GitHub integration, multi-screen app development, etc. IOS Apps are crafted through- Xcode, the center of the Apple development experience, released in 2003 by Apple. The Xcode includes Command Line Tools (CLT), which allow UNIX-style development through the Terminal app in macOS. The program tools operate on particular programming languages; for example, one can only use Swift Programming language in Xcode. 4. Design - Android App designs are guided by 'Material Design' on the other hand iOS Apps are built under 'Human Interface Guidelines. The distinctiveness of Designs between Android Apps and iOS Apps can be easily figured out.IOS Apps are more packed with content than the designs, and thus the App layouts are straightforward with broad white spaces in use. In addition, UI designers focus on shadows and gradients and amplify the depth of the Application Design. Android Apps are packed with more colours and designs that reflect the Real-world. Colours and Motion are the defining factors for Android Apps.Here are some differences between Android App and iOS App designsNavigation bar placement - In Android Apps, the navigation bar is placed in the left portion, while in iOS Apps, it is centrally aligned.Device fragmentation - Multiple Android OS versions make it difficult to design an Android App. A series of different screen sizes and layout proportions and buffering app interfaces on low version Android devices make it a complicated designing process.Widgets - Widgets are graphical user elements that display pieces of information and engage in user interaction. These Widgets are extensively supported by Android Apps, while on the other aspect, iOS Apps are still getting a hold of Widgets in their interface.5. Cost and Profit strategies - Even though it seems costly, one can do App Development on both Android and iOS platforms for free. The free tools given by Apple and Google can craft an excellent Application. But when you seek professional services and perfection, your budget can rise. The creation of an Application may or may not include financial outputs, but the actual expenditure begins when you launch your App in the market. iOS apps require a deposit of $100 per year with higher enterprise prices, while Google Play Store demands a one-time fee of $25. The acceptance procedure of Applications in the iOS market is also very lengthy and requires a longer time as compared to that with the Android Applications. The Apple experts conduct detailed tests and elaborately analyze iOS Applications. On the other hand, Android Applications easily get through the market tests, but they suffer in their service qualities.The Profit Strategies are also different in both cases. Android Applications gain profit through Ads mostly, while the iOS Applications ignore them to ensure users' convenience. The in-app purchases are more significant in Android Apps, but the transaction cost is higher in the case of iOS Apps. The primary strategy for gaining investment returns in the case of IOS apps is Paid applications. 11% of iOS gaming Apps include payments, while the percentage falls to 7% in the case of Android gaming Apps.In a nutshell, While Android Applications dominate the numerics, iOS Applications generate more profit. Want to learn about Mobile App development in detail? Contact us for a FREE consultation today!

Read More
sundew

Blog

Accelerating Digital Transformation Through the Cloud

Digital TransformationModernity in all senses aims at upgrading existing processes. Businesses are taking over their previous selves by adopting New Age technologies and newer Automation tools, bringing an overall business system transformation, unhinging their looser ends and revamping their industrial delivery.A Digital Transformation is more than mere implementation of innovative tech tools and converting manual processes into a digital one, rather, the process is different for each respective Company. Shifting to Cloud enables the support of a vigorous Computing power to achieve a full fledged Digital Transformation, and thus more and more businesses are adopting Cloud Services.The worldwide cloud computing industry size is anticipated to grow from USD 445.3 billion in 2021 to USD 947.3 billion by 2026, at a compound annual growth rate (CAGR) of 16.3% during the calculated period. - Research findings by Markets and MarketsIn This reading we will be talking about What is Cloud Computing?How does the Cloud amplify Digital Transformation? Why is Cloud inevitable for Digital Transformation?What is Cloud Computing?To eradicate the inconvenience of maintaining software applications in personal computers and unpredictable data losses, The Cloud has emerged as an on demand provider of IT Softwares and Data Storage services that can be accessed through the Internet without running any Software application physically. Cloud servers are located in data centers all over the world and thus it allows users to view the same file from any device irrespective of the geographical location.How it WorksCloud Computing is based on a process called Virtualization, that authorizes the creation of a “Virtual machine” which is a simulated virtual Computer that works as a physical one with its own hardware, but only Digitally. The Virtual machines follow the principles of sandboxing and thus can operate in multiple layers in the same physical device, maintaining the invisibility of software applications and files based on one Virtual Machine from the others. Cloud services that operate through a user access by using a browser or an application can connect the cloud over the Internet, irrespective of the device used in operation. Thus safeguarding data even if one of the servers crashes.Main Service ModelsIaaS - Infrastructure-as-a-Service: Through this Model the Cloud Computing Companies provide servers and storage, delivering a Cloud infrastructure upon which the Consumer Company can build their own desired applications. Paas - Platform-as-a-Service : Through this Model the Cloud Computing Companies deliver Tools along with the server and storage facilities, so that the Consumer Company can build the necessary applications, over the Internet. Saas- Software-as-a-Service : This is by far the most used Cloud Service Model as it offers the Consumer company readily available softwares which they can simply access through the Internet without any manual installations.How does the Cloud amplify Digital Transformation?An Intensified Security- Data has become the basis of all businesses in this Age. With New innovations like Robotic Process Automation depending on data to create intelligent AI and ML Systems, the essentiality of Data has increased. A well backed up Data Center generated by Cloud reduces the risk of Data breaches and data loss that can strangle a Company’s Reputation as well its Economy. Although Cloud Data houses suffer from data protection shortcomings, These can easily be adequate by using Cloud Data Security services that Authenticize and control Data flow over the Internet.Minimizes Financial Spending- If done correctly, Cloud Computing can save an enormous amount of money by removing or insignificant resources. Public Clouds maintain segregated data in the data warehouses with lower cost prices and look after the Original Company’s Data.The Hardware provided through Cloud Computing is maintained by the Provider, cutting costs of New Investments. This also saves for the necessity of Private staff to operate the Data centers. The pay-as-you-go format associated with it makes initial investments more profitable as Companies will be paying only for the services in use.Enhanced Scalability And Elasticity- The Accelerating Scalability associated with Cloud has made it Popular in the first place. Companies can choose their IT resources, increasing or decreasing their usage with required demand. The Traditional process required a very long time to be initiated following a lot of expense, while Scaling with Cloud Infrastructure is a convenient and quick process. Companies can choose between an Elastic or a Scalable Solution. The Elastic solution will provide for a Cloud Infrastructure that can expand or minimize synchronizing with the workload demand, Changing Swiftly. This fits best for Companies that have an unpredictable Workload. On the other hand, the Scalable Solution ensures a pre-designed and well rooted growth. This feature allows individual and aspiring Companies to grow on their own, without any financial burden. Global Accessibility- An Active internet connection is enough to make you access your data and the IT resources provided by cloud anywhere throughout the Globe. This feature has enabled the Extension of a Brand’s workforce irrespective of Geographical boundaries. Appointing skilled employees is another advantage for a well thriving Company. This also allows disabled people more employment opportunities and makes an all inclusive atmosphere for an Enterprise which has advantages of its own. Implementing Automation- Organizing workload traditionally is a very time consuming and repetitive process which is open to errors. These errors on the other hand are fatal for the Enterprise as they highlight threats and delay ongoing processes. By implementing tools of automation and orchestration, managing connections and operations can be automated. This means that computer systems, services and softwares can be coordinated through the Cloud itself, building a well managed and an efficient system. Agility- The process of being Agile drives businesses to prosperity. Simply put, it is the ability to adapt with changing business environments dynamically and rapidly, in a cost-effective manner. The extensive resources delivered through Cloud enables businesses to create, test and launch softwares beneficial for the business almost in no time. This Time saving process is also adaptable while delivering finished IT projects. Quality Softwares upgrade the skill set of the Organization, enhancing agility which drives Digital Transformation.Although Cloud Computing is not free from insufficiencies, with advancing technologies and Data Security Solutions it can be the way to achieve a resilient Digital Transformation. A robust Digital infrastructure, minimal cost, an extensive Data warehouse, better Software Solutions, and the other features that Cloud Comprises makes the process of Transformation from the very core, re-establishing business architecture and revamping its assets. Thus Cloud is a necessity to facilitate Digital Transformation.  

Read More
sundew

Blog

Top 5 Insurance Industry Trends to Watch Out In 2024

Internally, this industry is plagued by issues like ever-evolving customer demands, enhanced risk exposure, changing regulatory compliances, and increased occurrences of fraud.Adopting new digital trends is imperative if this sector wants to negate the effect of the above-mentioned factors. These trends also gain significance because they simplify the daily life of customers and employees alike by:Creating an intuitive, frictionless customer experienceReducing low-value, repetitive manual efforts put in by employeesImplementing Integrated Risk Management(IRM) initiativesThe insurance sector is a late bloomer in the field of technology adoption. It has, however, progressed to adopting Data Analytics and data-generated insights. Leveraging them has helped this industry to understand customer needs and preferences and pinpoint new growth opportunities.The ongoing digital transformation process, as illustrated by the integration of new technologies like IoT and AI, is making this sector increasingly competitive. Keeping up this momentum in 2024 will enable it to digitize the products and services offered, enhance customer engagement and drive inclusive sustainabilityAdditionally, for a perceptibly customer-centric industry, the ongoing tech transformation has exponentially escalated customer demands and made them more powerful. The ability to compare products for prices and suitability with just a few clicks has placed improving customer experience at the center of all upcoming insurance trends.ESG compliance to remain a key focusThe insurance sector faces a unique issue. Along with being evaluated based on their sustainability reports, insurers are also appraised on initiates taken to address carbon emissions, enable workforce diversity and increase governance transparencyGovernment and other such authorities have even introduced compliances that make it imperative for insurers to transition to a low-carbon economy and initiate procedures to manage climate-related risks better. Insurance companies are also swiftly realizing the commercial advantages of becoming Environmental, Social, and Governance(ESG) compliant. Statistics show that 85% of global insurers consider better ESG compliance necessary to transform brand reputation, investments, underwriting, risks & internal audits. Consequently, ESG compliance is now a competitive differentiator, and insurers must proactively focus on implementing initiatives to meet ESG requirements. Popularity of underwriting workbenchesInsurance underwriting refers to the process of assessing the risk potential of a customer. Underwriters have to analyze the business based on several factors, define the acceptability of the risk posed, and calculate a fair price for the coverage to be offered. The criticality of the work involved makes underwriting ideal for implementing automation, thus giving rise to the concept of the underwriter workbench.A centralized workspace containing a collection of all digital tools necessary for the successful execution of the underwriting process, is referred to as the underwriter’s workbench. They are a relatively novel concept. Underwriters have recently realized the convenience of using digital tools to quicken the entire process and make it more accurate. Additionally, the widespread use of automation, Artificial Intelligence, and Machine Learning in other insurance processes has catalyzed the adoption of underwriter workbenches. This accounts for the rapid rise in its popularity in the recent past.AI and process automation to lead from the frontThe digital transformation of other sectors has given customers a taste of a frictionless and convenient experience. Today, they expect the same standards from the insurance sector. Hence, process automation is mandatory if this sector wants to meet these customer expectations quickly. A report published by McKinsey predicts that by 2040, 55% of all insurance processes will be achieved using AI or Artificial Intelligence and ML or Machine Learning. McKinsey further states that automation will reduce the cost of a claim process by as much as 30%, which is substantial.The start of this trend is already evident in the collaborations insurance carriers are building with insurtechs. Leveraging the AI-based business model of these insurtechs is helping insurance carriers to evolve and adapt to the rapidly transforming business landscape. Capitalizing on the efficiencies generated by RPA, AI, Big Data, and Analytics will further help these carriers to streamline their operations and lower costs. They will also witness higher growth by meeting customer expectations and enhancing data security. Further, AI, as a technology driver, is responsible for giving rise to a critical trend in the insurance sector. This trend will lead to the massive evolution of the insurance sector with large-scale integration of AI, automation, and deep learning. Insurance players who evolve with this changing landscape will continue to thrive, but those still holding on to conventional systems might be forced to re-examine their strategies.Partiality toward Low-Code developmentThe insurance sector primarily needs a user-friendly and efficient website that can enhance customer satisfaction. The affinity for low-code websites in the insurance sector is a direct outcome of this need. Low-code websites typically have significantly fewer lines of code written compared to a traditional website. Such websites can be easily and quickly updated without undergoing the cumbersome website redevelopment process.  With customers’ appetite for the latest information evolving rapidly, this accelerated time to market for insurance sector applications has proved a boon.This is further corroborated by statistics as shared by Garter, which shows a growth of 22.6% in the market share of low-code digital insurance platform development. Alternatively, the development of high-end customized websites has declined by 23%. This proves the legitimacy of low-code development as a leading trend in the insurance sector for 2024.Preference for self-service capabilitiesCurrently, most insurance companies utilize the services of call centers and other such channels to handle customer queries and requests. But with workflow digitization resulting in increased customer convenience, there is a perceptible preference for self-servicing capabilities. Irrespective of whether the insurer is tech-savvy, there is universal gravitation towards automated processes. Today, customers want to self-manage policies, make premium payments, and raise and submit claims using self-service portals. With such high demand, insurance companies must upgrade their capabilities and opt for complete workflow digital transformation. Opting for this trend will prove to be counterproductive as insurance companies will benefit from:Reduced customer acquisition costsHigh customer retentionIncreased insurance agent productivityQuicker and less costly claim processesEnhanced customer loyalty resulting in better referralsFurther, implementing data analytics will empower insurance companies with customer behavioral data. They can provide personalized services and offer real-time assistance based on the same.The active adoption of the above trends for insurance digital transformation is no longer an option. It is a necessity that promises to lead the insurance sector toward offering enhanced customer experience,  saving operational costs, and innovating products and services. For a sector that has conventionally enjoyed stability and predictability, driving the above trends will help it to navigate the current uncertainties and achieve some semblance of the same stability and predictability.

Read More

Thank You!

Excellent!

Successfully subscribed to Sundew Solutions newsletter!

Acknowledged