Skip to content
WAMP SSL Automator

Features

Every feature exists because doing it by hand is where things break.

WAMP SSL Automator is small on the surface — one window, one button — and careful underneath. Here is what each part does and why it matters.

Genuinely trusted certificates

A local Root CA installed into the Windows trust store.

The certificates are signed by a CA your operating system trusts, so Edge and Chrome accept them with no warning at all. Not a yellow padlock, not a one-time exception — a real, trusted connection, exactly like a public site.

A modern certificate profile

SHA-256, RSA, SAN, EKU and 825-day validity.

Browsers in 2026 are strict: a certificate needs a Subject Alternative Name (the old Common Name is ignored), a serverAuth Extended Key Usage, and a validity period of 825 days or less. The tool issues exactly that profile — RSA-2048 domain keys under an RSA-4096 CA — so nothing is rejected for being out of spec.

Idempotent by design

Run it as many times as you like; the result is always clean.

Re-running with the same domains reuses the CA and any still-valid certificates, and cleanly replaces the managed blocks in your hosts and vhosts files. Add one domain to a list of ten and only the new work happens. No duplicates, no drift, no mess to clean up.

Merge, never clobber

Your existing Apache config is preserved verbatim.

Your localhost block, your comments, your other projects — all untouched. The tool only writes inside clearly marked sections for the domains you manage with it, so it lives alongside whatever you already have instead of replacing it.

Backups and automatic rollback

Timestamped backups every run; restore on any failure.

Before it changes anything, it backs up both your vhosts file and your hosts file with a timestamp. If Apache fails to restart, it restores those files, brings Apache back on the known-good config, and shows you the tail of the error log so you know exactly what happened.

End-to-end verification

It proves the result instead of assuming it.

After the restart, the tool fetches every domain over HTTPS using the same trust chain your browser uses. The final line of the log is a plain verdict — N/N OK — so you never have to open a browser to check whether it worked.

Auto-detection

Finds WAMP and reads your Apache version for you.

On startup it locates your install at C:\wamp64 or C:\wamp and reads your exact Apache version from httpd -v, so the generated config matches your stack. There is almost nothing to set up.

One window, a real-time log

See precisely what changed, as it changes.

Everything happens in a single desktop window with a live log. The pipeline runs on a background thread and streams each step as it executes, so the tool is never a black box operating on your system behind your back.

Ready for a green padlock?

Download it, add your domains, and watch the log say N/N OK.