[keycloak-user] Import a 4096 bits PEM file in a SAML client

Antoine Roux antoine.roux at esrf.fr
Wed Aug 16 10:50:32 EDT 2017


Hello,

Has anyone already import a big public key in a SAML client?
I'm trying to do it with a 4096 bits certificate (from 
https://auth.otc.t-systems.com/authui/saml/metadata.xml), but Keycloak 
reject it with an error :(

Apparently, in the database, the table is created with a limit of 2048 
characters.
The first time this limit appears in the project was in 2014!
https://github.com/keycloak/keycloak/commit/a1d1877751fa3698730d410237cd30bef5fe0db2#diff-1ad8ad74abf55edea2c4e84793fa348aR65

I opened an issue, but I'm wondering if there is a workaround... I can't 
believe no one import a such certificate.

https://issues.jboss.org/browse/KEYCLOAK-5303

See you,
Antoine


More information about the keycloak-user mailing list