Repository navigation
Replies: 1 comment 2 replies
|
I resolve it! |
|
Could you explain how you did it, @rober12? |
|
Hi @dalbani , yes of course — below are the steps I followed. First of all, it’s important to know which formats Keycloak supports. These are:
I managed to get it working with PKCS12. I didn’t test the others. Once you know which formats are supported by Keycloak, what I did was convert my keys from JWK format to PKCS12 format. This was not easy — I had to do quite a bit of research. The steps were as follows:
After you have the keys in PKCS12 format, you need to mount a volume in the Keycloak container so that the key is available in a path like: After completing this process, go to the Keycloak Admin Console and navigate to: Realm Settings → Keys → Add Provider → Java keystore In the Keystore field, enter the path /opt/keycloak/target/YOUR_KEY.pcks12, then fill in the remaining fields, and that’s it. I hope this helps. |
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Question
Hello everyone,
I am trying to configure a Key Provider of type java-keystore in Keycloak and I am struggling to understand how to properly import an existing private key.
In my case, I already have a pair of keys that:
My questions are the following:
I suspect this might be something obvious, but I am having a hard time understanding how all the pieces fit together.
The motivation behind this is that I already have issuer keys bound to a DID, and I want Keycloak to use those exact keys when issuing Verifiable Credentials, instead of generating and managing its own issuer keys.
Any guidance, clarification, or examples would be greatly appreciated.
I found and example of how to create a Java keystore from scratch (https://github.com/keycloak/keycloak-oauth-sig/blob/main/oid4vci-deployment/src/utils/crypto/generate_keystore.sh#L21), but I want to create a Java keystore from an existing private key.
Thank you very much in advance.
All reactions