You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Does Keycloak 20.x use --spi-truststore-file and default java trust store together?
#16438
Another question I want to asked together, I saw the keycloak don't support self-signed in #15265
Does that mean if my LDAP server has a self-signed CA, the keycloak cannot connected through TLS even the CA is configured by --spi-truststore-file- ?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji
reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
I want to ask if the keycloak server started with --spi-truststore-file- configured, will the keycloak still fall back to standard Java Truststore configuration.
A similar question at the stackoverflow but not for keycloak, seems it depends on how the X509TrustManager implemented?
https://stackoverflow.com/questions/24555890/using-a-custom-truststore-in-java-as-well-as-the-default-one.
Another question I want to asked together, I saw the keycloak don't support self-signed in
#15265
Does that mean if my LDAP server has a self-signed CA, the keycloak cannot connected through TLS even the CA is configured by --spi-truststore-file- ?
All reactions