Search code examples
windowssslwildflyundertow

wildfly/undertow access to windows certificate store


is it possible to configure wildfly/undertow to acces to a X.509 certificate located in the windows certificate store instead of a file representing the keystore, like :

<server-identities> <ssl protocol="..."> <keystore path="name-of-the-certificate" relative-to="jboss-module-which-can-access-to-the-windows-certificate-store" keystore-password="..." alias="..." key-password="..." /> </ssl> </server-identities>


Solution

  • It really depends on JVM you are running on. You need to configure security provider to one that your jvm supports to work with windows keystore. In case of Oracle JDK / OpenJDK you can find list of providers here

    example of configuration could be:

    <keystore provider="SunMSCAPI" path="name-of-key-in-ms-keystore" .../> 
    

    but it really depends on jvm you are running and other factors.