Import key into the JVM truststore #39749

cmonty14 · 2025-05-15T13:30:15Z

cmonty14
May 15, 2025

Hello,

can you please provide best-practice to import a key into the JVM truststore when Keycloak is running in a K8s cluster?

When I try to import the key manually using command

keytool -import -trustcacerts -alias adldap-ca \
  -cacerts -storepass changeit \
  -file /opt/bitnami/keycloak/certs/adldap.pem \
  -noprompt

I get this error:

Certificate was added to keystore
keytool error: java.io.FileNotFoundException: /opt/bitnami/java/lib/security/cacerts (Read-only file system)

THX

shawkins · 2025-05-15T15:09:50Z

shawkins
May 15, 2025
Collaborator

If it's a cert that doesn't change very often, you could just put it in conf/truststores directory in your image, and it will be picked up automatically: https://www.keycloak.org/server/keycloak-truststore

0 replies

cmonty14 · 2025-05-16T11:04:22Z

cmonty14
May 16, 2025
Author

Issue solved.

0 replies

Navigation Menu

Repository navigation

Import key into the JVM truststore #39749

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 2 comments

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Import key into the JVM truststore #39749

Uh oh!

Uh oh!

cmonty14 May 15, 2025

Replies: 2 comments

Uh oh!

shawkins May 15, 2025 Collaborator

Uh oh!

cmonty14 May 16, 2025 Author

cmonty14
May 15, 2025

shawkins
May 15, 2025
Collaborator

cmonty14
May 16, 2025
Author