Hello Everybody,
I am new to keycloak and playing around a little. I have small REST service
i have deployed in the keycloak server and am trying to secure it. This is
how far i have gotten:
1) I got the basic auth running.
2 ) I was abel to force SSL all through. Using a truststore in the adapter
and the necessary settings in standalone.xml
to take a step further i added:
<authentication>
<truststore path="server.truststore"
relative-to="jboss.server.config.dir"
keystore-password="mypassword"/>
</authentication>
to the security-realm which i used in step 2 to enable SSL, added the
truststore to the required directory. How ever this broke the application
partly. I can reach the master-realm login and admin console. When i go to
the URL of the REST service i am redirected to the loginpage of my
application realm. But after sucessfully logging in, i get a 403 forbidden
and "SSLPeerUnverifiedException: peer not authenticated" error in the logs.
Does any one have an idea why? The only thing that changed from one way SSL
to two-way SSL is the undertow configuration, why does it disturb the
adapter?
Best,
Sahil