How to enable TLSv1.3 in Wildfly 22.0.1 and Apache 2.4

Man Hing Chan

unread,

Jul 30, 2025, 9:21:26 AM7/30/25

to WildFly

Hi all,

As title, I would like to enable TLSv1.3 in Wildfly 22.0.1 and Apache 2.4. It works in Apache 2.4, but I cannot enable it in TLSv.1.3.

I checked on the material "https://docs.wildfly.org/wildfly-proposals/elytron/WFCORE-4172-tls-1.3.html", but I don't know how to follow it.

The attached file is my standalone.xml file.

Yours,
Manhing

standalone.xml

Bartosz Baranowski

unread,

Jul 31, 2025, 3:05:19 AM7/31/25

to WildFly

22.0.1 is on WFCORE 14 something, according to RFE, it has been incorporated in 11.0.0.Beta6, 11.0.0.Final . As to how, proposal doc should have all needed details: https://docs.wildfly.org/wildfly-proposals/elytron/WFCORE-4172-tls-1.3.html

Bartosz Baranowski

unread,

Jul 31, 2025, 3:07:51 AM7/31/25

to WildFly

ie. it has example config entries.

frank.l...@outlook.de

unread,

Jul 31, 2025, 8:06:05 AM7/31/25

to WildFly

Does this page help you: https://www.mastertheboss.com/jbossas/jboss-security/configuring-tls-1-3-on-wildfly-application-server/

Man Hing Chan

unread,

Aug 1, 2025, 4:46:43 AM8/1/25

to WildFly

Hi all,

Finally, I found the solution from the video "https://www.youtube.com/watch?v=CtC-_8UPlF4&t=205s".
...

<server-identities>
<ssl>
<engine enabled-protocols="TLSv1.3"/>
<keystore path="application.keystore" relative-to="jboss.server.config.dir" keystore-password="password" alias="server" key-password="password" generate-self-signed-certificate-host="localhost"/>
</ssl>
</server-identities>

...

Reply all

Reply to author

Forward