<div dir="ltr">I am fairly new to this. I am using Wildfly 8.0.0 Final. Where should I set this?</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, May 9, 2014 at 6:13 PM, Bill Burke <span dir="ltr"><<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Your server is secured via SSL? (https)? If so,<br>
<br>
In your adapter config set:<br>
<br>
"disable-trust-manager": true<br>
<br>
or provide a keystore file that holds the public cert of your server:<br>
<br>
"truststore": "/path",<br>
"truststore-password": "password"<br>
<div><div class="h5"><br>
<br>
<br>
<br>
<br>
On 5/9/2014 5:42 PM, Ben wrote:<br>
> I am using Keycloak Beta 1 Snapshot as my SSO but when any user logs in<br>
> it gives a 403 forbidden and the error shown below. Any idea what went<br>
> wrong?<br>
><br>
><br>
> ERROR [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-7)<br>
> failed to turn code into token:<br>
> javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated<br>
><br>
> at<br>
> sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:397)<br>
> [jsse.jar:1.7.0_45]<br>
><br>
> at<br>
> org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)<br>
><br>
> at<br>
> org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:572)<br>
><br>
> at<br>
> org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:180)<br>
><br>
> at<br>
> org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:151)<br>
><br>
> at<br>
> org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:125)<br>
><br>
> at<br>
> org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:640)<br>
><br>
> at<br>
> org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:479)<br>
><br>
> at<br>
> org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:906)<br>
><br>
> at<br>
> org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:805)<br>
><br>
> at<br>
> org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:784)<br>
><br>
> at<br>
> org.keycloak.adapters.ServerRequest.invokeAccessCodeToToken(ServerRequest.java:78)<br>
> [keycloak-adapter-core-1.0-beta-1-SNAPSHOT.jar:]<br>
><br>
> at<br>
> org.keycloak.adapters.ServerRequest.invokeAccessCodeToToken(ServerRequest.java:55)<br>
> [keycloak-adapter-core-1.0-beta-1-SNAPSHOT.jar:]<br>
><br>
> at<br>
> org.keycloak.adapters.OAuthRequestAuthenticator.resolveCode(OAuthRequestAuthenticator.java:256)<br>
> [keycloak-adapter-core-1.0-beta-1-SNAPSHOT.jar:]<br>
><br>
> at<br>
> org.keycloak.adapters.OAuthRequestAuthenticator.authenticate(OAuthRequestAuthenticator.java:205)<br>
> [keycloak-adapter-core-1.0-beta-1-SNAPSHOT.jar:]<br>
><br>
> at<br>
> org.keycloak.adapters.RequestAuthenticator.authenticate(RequestAuthenticator.java:59)<br>
> [keycloak-adapter-core-1.0-beta-1-SNAPSHOT.jar:]<br>
><br>
> at<br>
> org.keycloak.adapters.undertow.ServletKeycloakAuthMech.authenticate(ServletKeycloakAuthMech.java:38)<br>
> [keycloak-undertow-adapter-1.0-beta-1-SNAPSHOT.jar:]<br>
><br>
> at<br>
> io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:281)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:298)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:268)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:131)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:106)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:99)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.handlers.AuthenticationCallHandler.handleRequest(AuthenticationCallHandler.java:50)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:51)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:45)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:61)<br>
> [undertow-servlet-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:56)<br>
> [undertow-servlet-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70)<br>
> [undertow-servlet-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)<br>
><br>
> at<br>
> io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:54)<br>
> [keycloak-undertow-adapter-1.0-beta-1-SNAPSHOT.jar:]<br>
><br>
> at<br>
> io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:240)<br>
> [undertow-servlet-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:227)<br>
> [undertow-servlet-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:73)<br>
> [undertow-servlet-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:146)<br>
> [undertow-servlet-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:168)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:687)<br>
> [undertow-core-1.0.0.Final.jar:1.0.0.Final]<br>
><br>
> at<br>
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<br>
> [rt.jar:1.7.0_45]<br>
><br>
> at<br>
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<br>
> [rt.jar:1.7.0_45]<br>
><br>
> at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]<br>
><br>
><br>
><br>
</div></div>> _______________________________________________<br>
> keycloak-user mailing list<br>
> <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
><br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Bill Burke<br>
JBoss, a division of Red Hat<br>
<a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a><br>
_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
</font></span></blockquote></div><br></div>