Wildfly 10設置 SSL/TLS 與 管理者介面
詳細說明請考參最這裡 (點我 Link), 這裡就不多做說明了。
- 憑證(certificate)準備
- $ keytool -genkeypair -alias myServer -storetype jks -keyalg RSA -keysize 2048 -keypass myPassword -keystore wfly.jks -storepass myPassword -dname "CN=myServer,OU=test,L=Chicago,ST=IL,C=US" -validity 730 -v
- $ cp wfly.jks $JBOSS_HOME/standalone/configuration/
- Create File
- $JBOSS_HOME/standalone/configuration/https-users.properties
- RUN Wildfly Server
- ${JBOSS_DIR}/bin/jboss-cli.sh
- $ connect
- === 建立 Realm for SSL/TLS ===
- /core-service=management/security-realm=httpsRealm/:add
- /core-service=management/security-realm=httpsRealm/authentication=properties/:add(path=https-users.properties, relative-to=jboss.server.config.dir)
- /core-service=management/security-realm=httpsRealm/server-identity=ssl:add(keystore-path=wfly.jks,keystore-relative-to=jboss.server.config.dir,keystore-password=myPassword, alias=myServer)
- reload
- $JBOSS_HOME/bin/add-user.sh -up $JBOSS_HOME/standalone/configuration/https-users.properties -r httpsRealm
- === Enable SSL ===
- /subsystem=undertow/server=default-server/https-listener=default-https:add(socket-binding=https,security-realm=httpsRealm)
- === Enabling SSL for 管理介面 ===
- /core-service=management/management-interface=http-interface:write-attribute(name=secure-socket-binding,value=management-https)
- /core-service=management/management-interface=http-interface/:write-attribute(name=security-realm,value=httpsRealm)
- reload
- https://localhost:9993
