WildFly Elytron

SSL key switch without server restart

A blog post describing how to switch certificate and key used for SSL without WildFly restart.

OpenSSL support with WildFly

A blog post describing how to use OpenSSL in WildFly.

How to use an Elytron SASL mechanism that supports channel binding

This blog post shows how to set up one-way SSL/TLS for the management interface and how to then use a SASL mechanism that supports channel binding to connect to the CLI.

WildFly Elytron - Add Kerberos Authentication To Existing Web Application

A blog post describing how to override the authentication policy of an existing web application and add SPNEGO authentication to it.

Using WildFly Elytron with Undertow Standalone

Although developed for use within the WildFly application server the WildFly Elytron project can also be used in isolation, this blog post demonstrates how it can be used to secure an embedded Undertow server.

Getting started with EJBs and Elytron Part 2: EJB invocations from remote servers

This blog post describes how to invoke EJBs deployed on a WildFly server instance from another WildFly server instance using Elytron.

Getting started with EJBs and Elytron Part 1: Securing EJBs and invoking them from remote clients

This blog post describes how to secure EJBs deployed to WildFly 11 using Elytron and how to invoke them from a standalone remote client using the new Naming Client and EJB Client libraries.

WildFly Elytron - Principal Transformers, Realm Mappings, and Principal Decoders

To control the behaviour during authentication and authorization WildFly Elytron supports the use of various transformers, mappers, and decoders - this blog post describes how they fit together in the different stages of authentication.

WildFly Elytron - SSL Configuration

An early blog post describing how SSL configuration was being centrally defined within a new subsystem. Written early 2016 it is potentially due to be reviewed as exact commands may have evolved since it was written.