Adding a Secure https Listener to Undertow: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
(Created page with "=Internal= * [Undertow_WildFly_Subsystem_Configuration#Subjects|Undertow Subsystem Configuration]] =Overview= <pre> <subsystem xmlns="urn:jboss:domain:undertow:3.1"> <s...")
 
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
=Internal=
=Internal=


* [Undertow_WildFly_Subsystem_Configuration#Subjects|Undertow Subsystem Configuration]]
* [[Undertow_WildFly_Subsystem_Configuration#Subjects|Undertow Subsystem Configuration]]


=Overview=
=Overview=
Line 7: Line 7:
<pre>
<pre>
<subsystem xmlns="urn:jboss:domain:undertow:3.1">
<subsystem xmlns="urn:jboss:domain:undertow:3.1">
     <server name="default-server">
     <server name="default-server">
         ...
         ...
         <https-listener name="https" socket-binding="https" security-realm="HttpSslRealm"/>
         <https-listener name="https" socket-binding="https" security-realm="HTTPSRealm"/>
         <host ...>
         <host ...>
         </host>
         </host>
Line 16: Line 17:
</subsystem>
</subsystem>
</pre>
</pre>
<font color=red>
Add this to the security realm page:
<pre>
<host xmlns="urn:jboss:domain:4.1" name="master">
    <management>
        <security-realms>
            <security-realm name="HttpSslRealm">
                <server-identities>
                    <ssl>
                        <keystore path="ssl.keystore" relative-to="jboss.domain.config.dir" alias="ssl" keystore-password="test123" key-password="test123" />
                    </ssl>
                </server-identities>
            </security-realm>
        </security-realms>
</pre>
</font>

Latest revision as of 14:55, 16 March 2017

Internal

Overview

<subsystem xmlns="urn:jboss:domain:undertow:3.1">

    <server name="default-server">
        ...
        <https-listener name="https" socket-binding="https" security-realm="HTTPSRealm"/>
        <host ...>
        </host>
    </server>
    ...
</subsystem>


Add this to the security realm page:

<host xmlns="urn:jboss:domain:4.1" name="master">
    <management>
        <security-realms>
            <security-realm name="HttpSslRealm">
                <server-identities>
                    <ssl>
                        <keystore path="ssl.keystore" relative-to="jboss.domain.config.dir" alias="ssl" keystore-password="test123" key-password="test123" />
                    </ssl>
                </server-identities>
            </security-realm>
        </security-realms>