[keycloak-user] Keycloak 2.2.1.Final HTTPS new XML setup versus old JSON

[Stian Thorgersen]

Typo! Your provider tag for default httpClient is self-closing,

<provider name="default" enabled="true"*/*> should be:
<provider name="default" enabled="true">

On 23 September 2016 at 21:11, Joe Thielen <joe at joethielen.com> wrote:

> No, this is a new setup.  But I will try that to figure out the
> differences, thank you.
>
> On Sep 23, 2016 2:59 PM, "Thomas Darimont" <thomas.darimont at googlemail.com>
> wrote:
>
>> Hello Joe,
>>
>> did you use the migration tool mentioned in the docs? "Migrate and
>> convert keycloak-server.json"
>> https://keycloak.gitbooks.io/server-adminstration-guide/cont
>> ent/v/2.2/topics/MigrationFromOlderVersions.html
>> https://keycloak.gitbooks.io/server-installation-and-configu
>> ration/content/topics/config-subsystem/start-cli.html
>>
>> Cheers,
>> Thomas
>>
>> 2016-09-23 20:19 GMT+02:00 Joe Thielen <joe at joethielen.com>:
>>
>>> I'm trying to figure out how to configure HTTPS on 2.2.1.Final.  I've
>>> done it on 2.1.0.Final and had it functioning.  I used to put the following
>>> into *standalone/configuration/keycloak-server.json*
>>>
>>> "connectionsHttpClient": {
>>>     "default": {},
>>>     "client-keystore": "${jboss.home.dir}/standalone/configuration/keycloak.jks",
>>>     "client-keystore-password": "TPF-KCVM-KCKEYSTOREPASS",
>>>     "client-key-password": "TPF-KCVM-KCKEYSTOREPASS"
>>> },
>>>
>>> Now I understand there is no more JSON file.  I'm having issues getting
>>> the XML version running in standalone/configuration/standalone.xml.
>>>
>>> I looked at https://keycloak.gitbooks.io/server-installation-and-configu
>>> ration/content/v/2.2/topics/network/outgoing.html and now I've got this:
>>>
>>> <spi name="connectionsHttpClient">
>>>                 <provider name="default" enabled="true"/>
>>>                     <properties>
>>>                         <property name="client-keystore"
>>> value="${jboss.home.dir}/standalone/configuration/keycloak.jks"/>
>>>                         <property name="client-keystore-password"
>>> value="Test1234"/>
>>>                         <property name="client-key-password"
>>> value="Test1234"/>
>>>                     </properties>
>>>             </spi>
>>>
>>> And also:
>>>
>>>                 <spi name="truststore">
>>>                         <provider name="file" enabled="true">
>>>                                 <properties>
>>>                                         <property name="file"
>>> value="${jboss.home.dir}/standalone/configuration/keycloak.jks"/>
>>>                                         <property name="password"
>>> value="Test1234"/>
>>>                                         <property
>>> name="hostname-verification-policy" value="WILDCARD"/>
>>>                                         <property name="disabled"
>>> value="false"/>
>>>                                 </properties>
>>>                         </provider>
>>>                 </spi>
>>>
>>> However, when I start Keycloak I get this error:
>>>
>>> 18:07:46,305 ERROR [org.jboss.as.server] (Controller Boot Thread)
>>> WFLYSRV0055: Caught exception during boot: org.jboss.as.controller.persis
>>> tence.ConfigurationPersistenceException: WFLYCTL0085: Failed to parse
>>> configuration
>>>     at org.jboss.as.controller.persistence.XmlConfigurationPersiste
>>> r.load(XmlConfigurationPersister.java:131)
>>>     at org.jboss.as.server.ServerService.boot(ServerService.java:356)
>>>     at org.jboss.as.controller.AbstractControllerService$1.run(Abst
>>> ractControllerService.java:299)
>>>     at java.lang.Thread.run(Thread.java:745)
>>> Caused by: javax.xml.stream.XMLStreamException: Unknown keycloak-server
>>> subsystem tag: property
>>>     at org.keycloak.subsystem.server.extension.KeycloakSubsystemPar
>>> ser.readElement(KeycloakSubsystemParser.java:82)
>>>     at org.keycloak.subsystem.server.extension.KeycloakSubsystemPar
>>> ser.readElement(KeycloakSubsystemParser.java:56)
>>>     at org.jboss.staxmapper.XMLMapperImpl.processNested(XMLMapperIm
>>> pl.java:110)
>>>     at org.jboss.staxmapper.XMLExtendedStreamReaderImpl.handleAny(X
>>> MLExtendedStreamReaderImpl.java:69)
>>>     at org.jboss.as.server.parsing.StandaloneXml_4.parseServerProfi
>>> le(StandaloneXml_4.java:546)
>>>     at org.jboss.as.server.parsing.StandaloneXml_4.readServerElemen
>>> t(StandaloneXml_4.java:242)
>>>     at org.jboss.as.server.parsing.StandaloneXml_4.readElement(Stan
>>> daloneXml_4.java:141)
>>>     at org.jboss.as.server.parsing.StandaloneXml.readElement(Standa
>>> loneXml.java:103)
>>>     at org.jboss.as.server.parsing.StandaloneXml.readElement(Standa
>>> loneXml.java:49)
>>>     at org.jboss.staxmapper.XMLMapperImpl.processNested(XMLMapperIm
>>> pl.java:110)
>>>     at org.jboss.staxmapper.XMLMapperImpl.parseDocument(XMLMapperIm
>>> pl.java:69)
>>>     at org.jboss.as.controller.persistence.XmlConfigurationPersiste
>>> r.load(XmlConfigurationPersister.java:123)
>>>     ... 3 more
>>>
>>> 18:07:46,306 FATAL [org.jboss.as.server] (Controller Boot Thread)
>>> WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting.
>>> See previous messages for details.
>>>
>>> Did I do it wrong?
>>>
>>> _______________________________________________
>>> keycloak-user mailing list
>>> keycloak-user at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>
>>
>>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160928/6d01e25c/attachment.html