I'm not sure if I got your question in the right way. But from my understanding Java truststore is the standard fall back.

See item 3.2.5 https://keycloak.github.io/docs/userguide/keycloak-server/html/server-installation.html

On Wed, Feb 17, 2016 at 6:07 AM Jérôme Revillard <jrevillard@gnubila.fr> wrote:

Dear all,

I'm testing now a Keycloak server properly configured with https
configuration.
The server certificate is one which is already known by the default java
trustore.
Would it be possible to setup the keycloak.json adapter config to use
this default java trustore ?

Best,
Jerome

_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user