anchor.diff:  ----
   
   [[configure-a-server-ssl-context-in-that-references-your-key-manager]]
  -==== Configure a server-ssl-context in that references your key-manager:
  +===== Configure a server-ssl-context that references your key-manager:
   
   [source, ruby]
   ----
  
positive.code: [[enable-one-way-ssltls-for-applications]]
  === Enable One-way SSL/TLS for Applications
  
  In WildFly, you can use the Elytron subsystem, along with the Undertow
  subsystem, to enable HTTPS for deployed applications.
  
  [[obtain-or-generate-your-key-store]]
  ==== Obtain or generate your key store:
  
  Before enabling HTTPS in WildFly, you must obtain or generate the
  keystore you plan on using. To generate an example keystore:
  
  [source, bash]
  ----
  $ keytool -genkeypair -alias localhost -keyalg RSA -keysize 1024 -validity 365 -keystore /path/to/keystore.jks -dname "CN=localhost" -keypass secret -storepass secret
  ----
  
  [[configure-a-key-store-in-wildfly]]
  ==== Configure a key-store in WildFly:
  
  [source, ruby]
  ----
  
negative.code: ----
  
  [[reload-the-wildfly-instance.-1]]
  ===== Reload the WildFly instance.
  
  [source, ruby]
  ----
  reload
  ----
  
  To complete the two-way SSL/TLS authentication, you need to
  <<import-server-certificate-into-client-truststore-management,import the server certificate>>
  into the client truststore and
  <<configure-your-client-to-use-the-client-certificate-management,configure your client>>
  to present the client certificate.
  
  [[import-server-certificate-into-client-truststore-management]]
  ==== Import the server certificate into the client truststore.
  
  [source, bash]
  ----
  $ keytool -importcert -keystore client.truststore.jks -storepass secret -alias localhost -trustcacerts -file /path/to/server.cer
  ----
  
  [[configure-your-client-to-use-the-client-certificate-management]]
  ==== Configure your client to use the client certificate.
  
  You need to configure your client to present the trusted client
  