Tuesday 21 June 2016

How to configure SSL in WildFly 10 standalone mode

How to configure SSL in WildFly 10 standalone mode and change default ssl port to 443?


Important: From WildFly 8 onwards Web subsystem is replaced by Undertow subsystem.

 You can use any profile listed below.

1) standalone.xml
2) standalone-full.xml
3) standalone-full-ha.xml
4) standalone-ha.xml

NOTE: Just for demo purpose I am using selfsigned ssl certificates you can configure CA signed certificates in the same way.

Step1:

  • open standalone.xml
  •  Now under management option create custom security-realm with any name you want I have given "SslRelam as shown below:


<security-realm name="SslRealm">
<server-identities>
<ssl>
<keystore path="F:\NCM_PROD_SETUP\wildfly-10.0.0.CR5\standalone\configuration\ssl_cert\ncm.keystore" alias="ncm" keystore-password="123456" />
</ssl>
</server-identities>
</security-realm>

Step2:

  • Under profile option expand undertow subsystem there are two main parts which are server and Servlet container configuration

          Add https-listener under server for SslRealm created in step1:

<https-listener name="default-ssl" socket-binding="https" security-realm="SslRealm"/>

Save the changes and Restart WildFly Server.

Step3:

Change Default WilfFly https port 8443 to 443.

  • Under <socket-binding-group> change 8443 to 443


<socket-binding name="https" port="443"/>

Save the changes and Restart WildFly Server.

Please refer below  link to generate selfsigned ssl certificates

How to generate selfsigned certificates using java keytool command





No comments:

Post a Comment