为 Keycloak 17+ 设置 HTTPS/SSL

Question

由 Quarkus 发行版提供支持的 Keycloak 17 及更高版本是否具有独立模式？ keycloak 文档说，我仍然可以使用它来设置 HTTPS/SSL。 在文档中有一个程序，用于编辑standalone.xml文件，该文件不再存在于这个新版本的 keycloak 中。

单机模式还存在吗？ 或者在这个未弃用的新版本中是否有不同的文档应该使用？ 那么如何设置HTTPS/SSL呢？

Answer 1

参见https://www.keycloak.org/server/all-config?q=https

使用这些参数根据您的需要自定义 TLS 配置：

https-certificate-file

The file path to a server certificate or certificate chain in PEM format.

https-certificate-key-file

The file path to a private key in PEM format.

https-cipher-suites

The cipher suites to use.

https-client-auth

Configures the server to require/request client authentication.

https-key-store-file

The key store which holds the certificate information instead of specifying separate files.

https-key-store-password

The password of the key store file.

https-key-store-type

The type of the key store file.

https-port

The used HTTPS port.

https-protocols

The list of protocols to explicitly enable.

https-trust-store-file

The trust store which holds the certificate information of the certificates to trust.

https-trust-store-password

The password of the trust store file.

https-trust-store-type

The type of the trust store file.

容器部署也支持 TLS，见Keycloak Docker HTTPS 需要