Hi, I’m having trouble to find the option for configuring a truststore. In the Advanced Settings of LDAP there is a tooltip that points to a file named standalone.xml/domain.xml, but this only seems to exist in the WildFly-distribution and not in the Quarkus one we use. [Bildschirmfoto 2022-03-1…

You have to create the truststore file externally, copy it into the Keycloak image and configure it with these properties: Keycloak - Server - All configuration

Hi @stefan1 @dasniko I have a same problem but not works for me. I define trust store and import cert in dockerfile. Don’t know where the mistake is? ENV KC_HTTPS_TRUST_STORE_FILE=conf/ldap-test.jks ENV KC_HTTPS_TRUST_STORE_PASSWORD=PW1 RUN keytool -import -noprompt -trustcacerts -storepass PW…

Sorry, I directly modified the conf/keycloak.conf, don’t know how it works with docker. EDIT: doesn’t work for me either, I thought it worked at first glance, but it was only the LDAP-Connection-Test that worked. But when I try to authenticate I get this error - same as if i didn’t configure a trus…

Ok it works with the default java keystore - for me on Ubuntu it was: keytool -importcert -alias ucs-CA -keystore /usr/lib/jvm/default-java/lib/security/cacerts -file ucsCAcert.pem https://plone.lucidsolutions.co.nz/linux/java/how-to-add-a-certificate-authority-ca-certificate-to-the-openjdk-cacert…

@breed @dasniko Found the right parameter: Configuring outgoing HTTP requests - Keycloak Keycloak is an open source identity and access management solution --spi-truststore-file-file and --spi-truststore-file-password were the parameters i was looking for …

@stefan1 thank you for your reply. But not works for me still. ENV KC_SPI_TRUSTSTORE_FILE_FILE=conf/ldap-test.jks ENV KC_SPI_TRUSTSTORE_FILE_PASSWORD=PW RUN keytool -importcert -alias ldaptest-CA -storepass PW -noprompt -file /opt/keycloak/ldap-test.cer -keystore conf/ldap-test.jks

Similar problem with using ENV KC_SPI_TRUSTSTORE_FILE_.... [KC17] verifyServerCertificate with AWS Aurora DB (mysql) not working anymore opened 05:01PM - 22 Mar 22 UTC (UTC) closed 05:22PM - 10 Aug 22 UTC (UTC) …

Hello Dasniko , I am new to Keycloak and we are currently configuring the keycloak Quarkus version running on a Linux and I am not able to figure out how to get my windows AD cert into keycloak for LDAPS . I can not find any detail information for this setup. I noticed over 2K people viewed this t…

Truststore in KC 17 Quarkus for LDAPS/TLS

Configuring the server

lajibolala April 26, 2023, 7:28pm 12

Hi, Can you help me on this question

Topic		Replies	Views
Facing issue for LDAPS connection from keycloak running on docker as non root user Getting advice	0	414	February 28, 2024
Connect keycloak to LDAP over SSL Configuring the server ldap	21	35520	October 3, 2024
Keycloak LDAPS does not find valid certification path to requested target in Production Getting advice	0	1126	February 6, 2023
LDAPS Test Authentication failing by using User Federation module in keycloak Getting advice authentication , ldap	0	481	November 25, 2022
Keycloak on Docker using SAML2.0	9	3452	October 26, 2020

Truststore in KC 17 Quarkus for LDAPS/TLS

Related topics