[ https://issues.jboss.org/browse/WFLY-4321?page=com.atlassian.jira.plugin.... ] Charles Wilhelm commented on WFLY-4321: --------------------------------------- Can you give me some advice how to remove and add https listener without the need to reload? In combination with letsencrypt such a "hot" update of the keystores would be very nice. What I can do: {code} /subsystem=undertow/server=default-server/https-listener=https:remove() {code} but this needs a reload then. {code} /subsystem=undertow/server=default-server/https-listener=https:add(socket-binding=https, security-realm="UndertowRealm", enabled-protocols="TLSv1,TLSv1.1,TLSv1.2", enabled-cipher-suites="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384", max-post-size="52428800", no-request-timeout="20000", tcp-keep-alive="true", socket-binding="https") {code} whereas readding does not require a reload. -- This message was sent by Atlassian JIRA (v7.2.3#72005)