# Regarding SSL Configuration in keycloak 20.0.2

**URL:** <https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248>\
**Category:** Miscellanaeous\
**Created:** [December 21, 2022, 2:18pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248 "2022-12-21T14:18:25Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![LakshmiPhani7680](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lakshmiphani7680/32/7294_2.png) [@LakshmiPhani7680](https://forum.keycloak.org/u/LakshmiPhani7680)\
**Post date:** [December 21, 2022, 2:18pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/1 "2022-12-21T14:18:25Z")

</div>

Hi I am unable to configure the SSL Certificate to Keycloak 20.0.2, i am refering " [Configuring TLS - Keycloak](https://www.keycloak.org/server/enabletls#:~:text=Configuring%20TLS%201%20Configuring%20TLS%20protocols%20By%20default%2C,3%20Using%20a%20truststore%20...%204%20Relevant%20options)"  
this method is not working for me as i am getting following error  
“ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: java.lang.RuntimeException: Missing -----BEGIN CERTIFICATE----- delimeter”,  
Anyone please respond, as we need this task to be done ASAP.  
Thank you,  
P.Phani

---

<div class="post-metadata">

**Author:** ![Carl](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/carl/32/10443_2.png) [@Carl](https://forum.keycloak.org/u/Carl)\
**Post date:** [December 21, 2022, 5:33pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/2 "2022-12-21T17:33:00Z")

</div>

You’ll have to be more specific about your configuration.

From the link you posted, sre you following “Providing certificates in PEM format” or “Providing a Java Keystore”?

---

<div class="post-metadata">

**Author:** ![LakshmiPhani7680](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lakshmiphani7680/32/7294_2.png) [@LakshmiPhani7680](https://forum.keycloak.org/u/LakshmiPhani7680)\
**Post date:** [December 21, 2022, 6:06pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/3 "2022-12-21T18:06:01Z")

</div>

I have used in both ways, the error is occuring for the PEM format ones

---

<div class="post-metadata">

**Author:** ![Carl](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/carl/32/10443_2.png) [@Carl](https://forum.keycloak.org/u/Carl)\
**Post date:** [December 21, 2022, 6:22pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/4 "2022-12-21T18:22:16Z")

</div>

Can you confirm that your PEM public key contains the proper -----BEGIN CERTIFICATE----- header? This is the file you’re specifying with --https-certificate-file.

---

<div class="post-metadata">

**Author:** ![LakshmiPhani7680](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lakshmiphani7680/32/7294_2.png) [@LakshmiPhani7680](https://forum.keycloak.org/u/LakshmiPhani7680)\
**Post date:** [December 22, 2022, 2:13am UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/5 "2022-12-22T02:13:42Z")

</div>

I am using PEM Private Certificate and Key Private Key, do i need to use PUBLIC KEY?

---

<div class="post-metadata">

**Author:** ![Carl](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/carl/32/10443_2.png) [@Carl](https://forum.keycloak.org/u/Carl)\
**Post date:** [December 22, 2022, 3:10am UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/6 "2022-12-22T03:10:54Z")

</div>

The public key is the certificate that anyone can read. Go to any website and pull up the padlock icon.

The private key is kept hidden by KC and works to encrypt or to digitally sign information.

---

<div class="post-metadata">

**Author:** ![LakshmiPhani7680](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lakshmiphani7680/32/7294_2.png) [@LakshmiPhani7680](https://forum.keycloak.org/u/LakshmiPhani7680)\
**Post date:** [December 22, 2022, 3:37am UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/7 "2022-12-22T03:37:57Z")

</div>

So in config file  
In https-certificate-file = i need to place public certificate? And key public key?

---

<div class="post-metadata">

**Author:** ![LakshmiPhani7680](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lakshmiphani7680/32/7294_2.png) [@LakshmiPhani7680](https://forum.keycloak.org/u/LakshmiPhani7680)\
**Post date:** [December 22, 2022, 1:15pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/8 "2022-12-22T13:15:29Z")

</div>

That one resolved,  
Now another one is like in 11.0.3 version, i am getting an error while running the keycloak as a service in server

 ![IMG_20221222_184206](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/3/34666c4caa40be1dc7bae3bbe1ca62b2ba3a8b29.jpeg)  
What may be the issue and how to resolve it please respond.

---

<div class="post-metadata">

**Author:** ![Carl](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/carl/32/10443_2.png) [@Carl](https://forum.keycloak.org/u/Carl)\
**Post date:** [December 22, 2022, 2:51pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/9 "2022-12-22T14:51:55Z")

</div>

You’ll need to provide a little more information. This is a brand new installation of a very old Keycloak 11 or are you moving it around?

---

<div class="post-metadata">

**Author:** ![Carl](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/carl/32/10443_2.png) [@Carl](https://forum.keycloak.org/u/Carl)\
**Post date:** [December 22, 2022, 2:52pm UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/10 "2022-12-22T14:52:38Z")

</div>

If this is for Keycloak 11, I’d open a new topic since you’re no longer troubleshooting SSL on 20.

---

<div class="post-metadata">

**Author:** ![LakshmiPhani7680](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lakshmiphani7680/32/7294_2.png) [@LakshmiPhani7680](https://forum.keycloak.org/u/LakshmiPhani7680)\
**Post date:** [December 29, 2022, 6:42am UTC](https://forum.keycloak.org/t/regarding-ssl-configuration-in-keycloak-20-0-2/19248/11 "2022-12-29T06:42:40Z")

</div>

no need that was done, Thank you
