Just to let you know, it seems there's an issue with TLS in the Operator as well: https://github.com/keycloak/keycloak-operator/issues/99 I'm not sure why, but auto-generated TLS key/certificate seems to be invalid. But I haven't investigated why.... On Thu, Nov 28, 2019 at 9:13 AM Stian Thorgersen <sthorger(a)redhat.com&gt; wrote: > Looks like either the change to ubi-minimal base image or change from JDK > 8 > to 11 has caused some regressions with regards to TLS: > > https://issues.jboss.org/browse/KEYCLOAK-11988 > https://issues.jboss.org/browse/KEYCLOAK-12017 > > Not sure how many people are affected, but perhaps we could add an > environment variable to enable TLS 1.1? > _______________________________________________ > keycloak-dev mailing list > keycloak-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev > >