JBOSS WILDFLY SSL CONFIGURATION FOR FIRST TIME INSTALLATION

  Hello Everyone Welcome to another exciting blog where i walk you through step by step ssl configuration on jboss wildfly, so let's start without any further due.

JBOSS WILDFLY CONFIGURATION FOR FIRST TIME INSTALLATION

Install ssl on jboss wildfly.

Note: Take backup of original standalone.xml before moving towards configuration  modification.

Create a complete JKS/Keystore file and then proceed with below changes.

Visit here to create JKS keystore file : How to create JKS keystore file.

1.     Configure WildFly for HTTPS Connector

1. Navigate to $JBOSS_HOME/standalone/configuration directory and open the standalone.xml file.

Go to <management> element configuration

And Add below connector under <security-realm name="ApplicationRealm"> just before the <authentication>  tag

<server-identities>

        <ssl>

      <keystore path="yourjksfile.keystore" relative-to="jboss.server.config.dir" keystore-password="PASSWORD" alias="jboss"/>

       </ssl>

      </server-identities>

After adding the entry it looks like below entry

Note: The <authentication> and <authorization> elements are mandatory.

Bonus Tip 😎: Make sure you place jks/keystore file in configuration folder and define keystore file without any path, similar to above screenshot. e.g  path="yourjksfile.keystore"

Now that 1^st step is completed, Let’s move towards our next step.

1.     Locate the "http-remoting-connector"  and make sure it is there

<http-connector name="http-remoting-connector" connector-ref="default" security-realm="ApplicationRealm"/>

It should be under

<subsystem xmlns="urn:jboss:domain:remoting:3.0">

            <endpoint/>

It will look like below highlighted area

If it is there that’s great then let’s move to the next step.

1.     Locate the "https-listener"  if unable to find then follow below steps to add one.

Add below line connector

<https-listener name="https" socket-binding="https" security-realm="ApplicationRealm" enable-http2="true"/>

Above connector needs to be placed under

<subsystem xmlns="urn:jboss:domain:undertow:3.1"> (values can be different as 3.0 or 3.1 etc here we have 3.1)

            <buffer-cache name="default"/>

            <server name="default-server">

                <http-listener name="default" max-parameters="400000" max-post-size="1717986920" socket-binding="http" redirect-socket="https"/>

After placing the code it will look like below screenshot.

Lets move ahead with our 4^th option which is port configuration

1.     Port Configuration

1. Navigate to $JBOSS_HOME/standalone/configuration directory and open the standalone.xml file.
2. Change the default WilfFly HTTPS port from 8443 to 443 under <socket-binding-group>:

c.  <socket-binding-group name="standard-sockets" default-interface="public" ...>

d.  <socket-binding name="http" port="80" />

e.  <socket-binding name="https" port="443" />

f.  ...

</socket-binding-group>

In my case I am using 8443, see the below screenshot.

1. Save the updated standalone.xml file.
2. Restart jboss-wildfly services to test the configuration.
   
   
1. Verify SSL Configuration
1. Type the following url into your browser:

https://IPaddress:443/eml/Login

If the your page Login screen is displayed, an SSL is successfully configured.

Stay tune for more such blogs :)