[keycloak-user] Keycloak 2.2.1.Final HTTPS new XML setup versus old JSON

Joe Thielen joe at joethielen.com
Fri Sep 23 14:19:25 EDT 2016


I'm trying to figure out how to configure HTTPS on 2.2.1.Final.  I've done
it on 2.1.0.Final and had it functioning.  I used to put the following into
*standalone/configuration/keycloak-server.json*

"connectionsHttpClient": {
    "default": {},
    "client-keystore":
"${jboss.home.dir}/standalone/configuration/keycloak.jks",
    "client-keystore-password": "TPF-KCVM-KCKEYSTOREPASS",
    "client-key-password": "TPF-KCVM-KCKEYSTOREPASS"
},

Now I understand there is no more JSON file.  I'm having issues getting the
XML version running in standalone/configuration/standalone.xml.

I looked at
https://keycloak.gitbooks.io/server-installation-and-configuration/content/v/2.2/topics/network/outgoing.html
and now I've got this:

<spi name="connectionsHttpClient">
                <provider name="default" enabled="true"/>
                    <properties>
                        <property name="client-keystore"
value="${jboss.home.dir}/standalone/configuration/keycloak.jks"/>
                        <property name="client-keystore-password"
value="Test1234"/>
                        <property name="client-key-password"
value="Test1234"/>
                    </properties>
            </spi>

And also:

                <spi name="truststore">
                        <provider name="file" enabled="true">
                                <properties>
                                        <property name="file"
value="${jboss.home.dir}/standalone/configuration/keycloak.jks"/>
                                        <property name="password"
value="Test1234"/>
                                        <property
name="hostname-verification-policy" value="WILDCARD"/>
                                        <property name="disabled"
value="false"/>
                                </properties>
                        </provider>
                </spi>

However, when I start Keycloak I get this error:

18:07:46,305 ERROR [org.jboss.as.server] (Controller Boot Thread)
WFLYSRV0055: Caught exception during boot:
org.jboss.as.controller.persistence.ConfigurationPersistenceException:
WFLYCTL0085: Failed to parse configuration
    at
org.jboss.as.controller.persistence.XmlConfigurationPersister.load(XmlConfigurationPersister.java:131)
    at org.jboss.as.server.ServerService.boot(ServerService.java:356)
    at
org.jboss.as.controller.AbstractControllerService$1.run(AbstractControllerService.java:299)
    at java.lang.Thread.run(Thread.java:745)
Caused by: javax.xml.stream.XMLStreamException: Unknown keycloak-server
subsystem tag: property
    at
org.keycloak.subsystem.server.extension.KeycloakSubsystemParser.readElement(KeycloakSubsystemParser.java:82)
    at
org.keycloak.subsystem.server.extension.KeycloakSubsystemParser.readElement(KeycloakSubsystemParser.java:56)
    at
org.jboss.staxmapper.XMLMapperImpl.processNested(XMLMapperImpl.java:110)
    at
org.jboss.staxmapper.XMLExtendedStreamReaderImpl.handleAny(XMLExtendedStreamReaderImpl.java:69)
    at
org.jboss.as.server.parsing.StandaloneXml_4.parseServerProfile(StandaloneXml_4.java:546)
    at
org.jboss.as.server.parsing.StandaloneXml_4.readServerElement(StandaloneXml_4.java:242)
    at
org.jboss.as.server.parsing.StandaloneXml_4.readElement(StandaloneXml_4.java:141)
    at
org.jboss.as.server.parsing.StandaloneXml.readElement(StandaloneXml.java:103)
    at
org.jboss.as.server.parsing.StandaloneXml.readElement(StandaloneXml.java:49)
    at
org.jboss.staxmapper.XMLMapperImpl.processNested(XMLMapperImpl.java:110)
    at
org.jboss.staxmapper.XMLMapperImpl.parseDocument(XMLMapperImpl.java:69)
    at
org.jboss.as.controller.persistence.XmlConfigurationPersister.load(XmlConfigurationPersister.java:123)
    ... 3 more

18:07:46,306 FATAL [org.jboss.as.server] (Controller Boot Thread)
WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting.
See previous messages for details.

Did I do it wrong?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160923/33619edc/attachment-0001.html 


More information about the keycloak-user mailing list