November 2024 – My Projects & Live

Ref: https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-apache-in-ubuntu-22-04

1. open up the firewall ufw for the http and https ports:
[codesyntax lang=”bash”]

satria@teddy:~$ sudo ufw allow "Apache Full"
[sudo] password for satria: 
ERROR: Could not find a profile matching 'Apache Full'

satria@teddy:~$ sudo ufw allow "Apache Full"

[sudo] password for satria:

ERROR: Could not find a profile matching 'Apache Full'

[/codesyntax]

2. enable mod_ssl
[codesyntax lang=”bash”]

satria@teddy:~$ sudo a2enmod ssl
Considering dependency mime for ssl:
Module mime already enabled
Considering dependency socache_shmcb for ssl:
Enabling module socache_shmcb.
Enabling module ssl.
See /usr/share/doc/apache2/README.Debian.gz on how to configure SSL and create self-signed certificates.
To activate the new configuration, you need to run:
  systemctl restart apache2

satria@teddy:~$ sudo systemctl restart apache2

satria@teddy:~$ sudo a2enmod ssl

Considering dependency mime for ssl:

Module mime already enabled

Considering dependency socache_shmcb for ssl:

Enabling module socache_shmcb.

Enabling module ssl.

See /usr/share/doc/apache2/README.Debian.gz on how to configure SSL and create self-signed certificates.

To activate the new configuration, you need to run:

systemctl restart apache2

satria@teddy:~$ sudo systemctl restart apache2

[/codesyntax]

3. Creating the TLS Certificate
[codesyntax lang=”bash”]

satria@teddy:~$ sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt
.+.......+.....+.+........+...................+..+...+...+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*..+......+.........+.........+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.....+.......+......+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
..+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*..+..+...+...............+.+.....+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.+.......+...+......+...+......+.....+....+...+..+...+.......+.....+......+.......+.........+...........+.......+...+...+..+.........+....+..+....+...+..+...+.+..+.......+.....+......+.+......+..............+.+.....+.........+......+.........+....+.........+...+.......................+.......+...+......+...+...+..+.......+.....+....+.................+....+.....+.............+......+..+....+...+.....+......+...................+..+.........................+.....+......+....+.....+....+.........+..+.+..+.+.........+..+...+.......+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:ID
State or Province Name (full name) [Some-State]:My State
Locality Name (eg, city) []:My City
Organization Name (eg, company) [Internet Widgits Pty Ltd]:LimauSoft
Organizational Unit Name (eg, section) []:IT Department
Common Name (e.g. server FQDN or YOUR name) []:satria
Email Address []:xxx@yahoo.com

satria@teddy:~$ sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt

.+.......+.....+.+........+...................+..+...+...+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*..+......+.........+.........+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.....+.......+......+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

..+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*..+..+...+...............+.+.....+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.+.......+...+......+...+......+.....+....+...+..+...+.......+.....+......+.......+.........+...........+.......+...+...+..+.........+....+..+....+...+..+...+.+..+.......+.....+......+.+......+..............+.+.....+.........+......+.........+....+.........+...+.......................+.......+...+......+...+...+..+.......+.....+....+.................+....+.....+.............+......+..+....+...+.....+......+...................+..+.........................+.....+......+....+.....+....+.........+..+.+..+.+.........+..+...+.......+...+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

-----

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [AU]:ID

State or Province Name (full name) [Some-State]:My State

Locality Name (eg, city) []:My City

Organization Name (eg, company) [Internet Widgits Pty Ltd]:LimauSoft

Organizational Unit Name (eg, section) []:IT Department

Common Name (e.g. server FQDN or YOUR name) []:satria

Email Address []:xxx@yahoo.com

[/codesyntax]

4. Configuring Apache to Use TLS
[codesyntax lang=”bash”]

satria@teddy:~$ sudo gedit /etc/apache2/sites-available/mywebsite.test.conf

1	satria@teddy:~$ sudo gedit /etc/apache2/sites-available/mywebsite.test.conf

[/codesyntax]

the config file like this
[codesyntax lang=”php”]

&lt;VirtualHost mywebsite.test:80&gt; 
  ServerName www.mywebsite.test 
  Redirect / https://mywebsite.test/ 
&lt;/VirtualHost&gt;

&lt;VirtualHost mywebsite.test:443&gt; 
  ServerName www.mywebsite.test 
  DocumentRoot "/home/satria/Documents/projects/mywebsite" 
  DirectoryIndex index.php 
  &lt;Directory "/home/satria/Documents/projects/mywebsite"&gt; 
    AllowOverride All 
    Allow from All 
    Require all granted 
  &lt;/Directory&gt; 
  
  SSLEngine on
  SSLCertificateFile /etc/ssl/certs/apache-selfsigned.crt
  SSLCertificateKeyFile /etc/ssl/private/apache-selfsigned.key
   
  ErrorLog /var/log/apache2/mywebsite.error.log 
  CustomLog /var/log/apache2/mywebsite.access.log combined 
&lt;/VirtualHost&gt;

ServerName www.mywebsite.test

Redirect / https://mywebsite.test/

</VirtualHost>

ServerName www.mywebsite.test

DocumentRoot "/home/satria/Documents/projects/mywebsite"

DirectoryIndex index.php

AllowOverride All

Allow from All

Require all granted

</Directory>

SSLEngine on

SSLCertificateFile /etc/ssl/certs/apache-selfsigned.crt

SSLCertificateKeyFile /etc/ssl/private/apache-selfsigned.key

ErrorLog /var/log/apache2/mywebsite.error.log

CustomLog /var/log/apache2/mywebsite.access.log combined

</VirtualHost>

[/codesyntax]
don’t forget to reload/restart apache2 service

5. Now load your site in a browser, being sure to use https:// at the beginning.

You should see an error. This is normal for a self-signed certificate! The browser is warning you that it can’t verify the identity of the server, because our certificate is not signed by any of its known certificate authorities. For testing purposes and personal use this can be fine. You should be able to click through to advanced or more information and choose to proceed.

<OLD>Ref: https://gist.github.com/henryonsoftware/066d8282daaf8c2ae281ce010e3e5404

1. Download xdebug source code from https://github.com/xdebug/xdebug/releases
for example the xdebug 3.3.2 from https://github.com/xdebug/xdebug/archive/refs/tags/3.3.2.tar.gz

2. extract the downloaded file
satria@teddy:~$ cd Downloads/
satria@teddy:~/Downloads$ tar -xvzf xdebug-3.3.2.tar.gz

3. run ‘phpize’
satria@teddy:~/Downloads$ cd xdebug-3.3.2/
satria@teddy:~/Downloads/xdebug-3.3.2$ phpize
Configuring for:
PHP Api Version: 20210902
Zend Module Api No: 20210902
Zend Extension Api No: 420210902
configure.ac:165: warning: The macro `AC_PROG_LIBTOOL’ is obsolete.
configure.ac:165: You should run autoupdate.
build/libtool.m4:99: AC_PROG_LIBTOOL is expanded from…
configure.ac:165: the top level

4. run ‘./configure’
satria@teddy:~/Downloads/xdebug-3.3.2$ ./configure

5. run ‘make’
satria@teddy:~/Downloads/xdebug-3.3.2$ make

6. copy the module xdebug.so to php lib 20210902
</OLD>
<NEW>

Use php from repository ppa:ondrej/php
then install php8.2-dev
[codesyntax lang=”php”]

sudo add-apt-repository ppa:ondrej/php
sudo apt update
sudo apt install php8.2-dev

sudo add-apt-repository ppa:ondrej/php

sudo apt update

sudo apt install php8.2-dev

[/codesyntax]

then install php8.2-xdebug
[codesyntax lang=”php”]

satria@teddy:~$ sudo apt-get install php8.2-xdebug

1	satria@teddy:~$ sudo apt-get install php8.2-xdebug

[/codesyntax]

check the php version
[codesyntax lang=”php”]

satria@teddy:~$ php -v
PHP 8.2.25 (cli) (built: Oct 30 2024 11:25:56) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.2.25, Copyright (c) Zend Technologies
    with Zend OPcache v8.2.25, Copyright (c), by Zend Technologies
    with Xdebug v3.3.2, Copyright (c) 2002-2024, by Derick Rethans

satria@teddy:~$ php -v

PHP 8.2.25 (cli) (built: Oct 30 2024 11:25:56) (NTS)

Zend Engine v4.2.25, Copyright (c) Zend Technologies

with Zend OPcache v8.2.25, Copyright (c), by Zend Technologies

[/codesyntax]

if not php8.2, you can select it by using
[codesyntax lang=”php”]

satria@teddy:~$ sudo update-alternatives --config php

1	satria@teddy:~$ sudo update-alternatives --config php

[/codesyntax]

CONFIG XDEBUG

sudo gedit /etc/php/8.2/apache2/conf.d/20-xdebug.ini

1	sudo gedit /etc/php/8.2/apache2/conf.d/20-xdebug.ini

SETTING

zend_extension=xdebug.so
xdebug.mode= debug 
xdebug.start_with_request = yes 
xdebug.var_display_max_data = 1024
xdebug.var_display_max_children = 512 
xdebug.var_display_max_depth = 6

zend_extension=xdebug.so

xdebug.mode= debug

xdebug.start_with_request = yes

xdebug.var_display_max_data = 1024

xdebug.var_display_max_children = 512

xdebug.var_display_max_depth = 6

Month: November 2024

Create a Self-Signed SSL Certificate for Apache in Ubuntu 22.04

Install xdebug with PHP 8.2 on Ubuntu 22.04