8000 Backport: use configured crypto provider to read generated truststores (26.8) by shawkins · Pull Request #54468 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

Backport: use configured crypto provider to read generated truststores (26.8) - #54468

Merged
vmuzikar merged 1 commit into
keycloak:release/26.8from
shawkins:iss53729-26.8
Nov 6, 2026
Merged

vmuzikar merged 1 commit into
keycloak:release/26.8from
shawkins:iss53729-26.8

Conversation

@shawkins
Copy link
Copy Markdown
Contributor

Publish and honor javax.net.ssl.trustStoreProvider when loading system truststores. Preserve explicit SPI and HTTPS truststore loading.

Closes #53729

@shawkins shawkins changed the title fix: use configured crypto provider to read generated truststores Backport: use configured crypto provider to read generated truststores (26.8) Oct 30, 2026
@vmuzikar vmuzikar left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks.

@shawkins
Copy link
Copy Markdown
Contributor Author

Looks like at least #54399 is needed to make progress here.

Publish and honor javax.net.ssl.trustStoreProvider when loading system
truststores. Preserve explicit SPI and HTTPS truststore loading.

Closes keycloak#53729

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
@shawkins
shawkins marked this pull request as ready for review November 6, 2026 13:56
@shawkins
shawkins requested a review from a team as a code owner November 6, 2026 13:56
@vmuzikar
vmuzikar merged commit dd66ebb into keycloak:release/26.8 Nov 6, 2026
90 of 91 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

0