Configure JBoss EAP with native SSL support

Ever tried to get all information you need to get JBoss EAP up and running using native SSL? No? Here's the Alex way getting EAP 6.1.0 with native SSL support up and running on Windows Server 2008 R2 64bit.

Prerequisite

• JBoss EAP 6.1.0 GA
• No usage of welcome-root (otherwise set flag enable-welcome-root to true in standalone.xml)
• Windows Server 2008 R2 64bit
• SSL private key file as plain text PEM format (RSA)
• SSL certificate as plain text PEM format
• SSL CA bundle as plain text PEM format

Solution

• Download Windows Server 2008 R2 64bit native libs from here (login required)
• Unpack and move lib folder including all sub content to your JBoss installation - say C:\jboss-eap-6.1\modules\system\layers\base\org\jboss\as\web\main
• Add/edit standalone.xml (Example path: C:\jboss-eap-6.1\standalone\configuration) as follows - important: set native attribute to true!

<subsystem xmlns="urn:jboss:domain:web:1.4" default-virtual-server="default-host" native="true"> <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http" redirect-port="${jboss.https.port:8443}"/> <connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" secure="true">   <ssl name="ssl" certificate-key-file="../../cert/ssl-private-key.key" verify-client="false" certificate-file="../../cert/ssl-certificate.crt" ca-certificate-file="../../cert/ssl-cabundle.cabundle"/> </connector> <virtual-server name="default-host" enable-welcome-root="false">   <alias name="localhost"/>   <alias name="example.com"/> </virtual-server> </subsystem>

• Restart JBoss
• Check server.log for ERRORs - SSL loading is fine if

[org.apache.coyote.http11] (MSC service thread 1-3) JBWEB003000: Coyote HTTP/1.1 starting on: http-/0.0.0.0:443

• DONE