You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are trying to use keycloak with a SMTP server with a custom CA. To explain a little further, this is a corporate environmnet with their own CA in AD. Keycloak is over HTTPS but this is done by another container acting as a reverse proxy so as far as keycloak in its container is concerned its via HTTP. However becuase the SMTP server is using the custom CA, you get an exception when connecting to it. I have tried importing the CA into a cacerts file and mounting that inside the docker image (also setting -Djavax.net.ssl.trustStore=/etc/cacerts -Djavax.net.ssl.trustStorePassword=XXX) to make keycloak use the key store, but still does not let me connect. I am happy my cacerts file is correct as I have knocked up a little Java application to send emails and I get the same error, but when using my custom cacerts file it works as expected.
Any thoughts on how I get keycloak to accept the certificate from the mail server?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
We are trying to use keycloak with a SMTP server with a custom CA. To explain a little further, this is a corporate environmnet with their own CA in AD. Keycloak is over HTTPS but this is done by another container acting as a reverse proxy so as far as keycloak in its container is concerned its via HTTP. However becuase the SMTP server is using the custom CA, you get an exception when connecting to it. I have tried importing the CA into a cacerts file and mounting that inside the docker image (also setting -Djavax.net.ssl.trustStore=/etc/cacerts -Djavax.net.ssl.trustStorePassword=XXX) to make keycloak use the key store, but still does not let me connect. I am happy my cacerts file is correct as I have knocked up a little Java application to send emails and I get the same error, but when using my custom cacerts file it works as expected.
Any thoughts on how I get keycloak to accept the certificate from the mail server?
All reactions