The ServerConfig#getWebServiceSecurePort method is returning wrong default value when there's no HTTPS connector/listener available on WFLY (and no https listener has been installed since the AS was started). The reason is in the Undertow implementation of CommonWebServer which returns the HTTP listener port if there's no HTTPS listener.