This repository has been archived by the owner on Apr 17, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 1
Configure HTTPS for Keycloak on OS X
Attila Levente EGYEDI edited this page Feb 24, 2016
·
20 revisions
###Make keystore accessible for Keycloak
goconf
cp keycloak/keystore/keycloak.jks $KEYCLOAK_HOME/standalone/configuration/
###Modify Keycloak configuration
cd $KEYCLOAK_HOME/standalone/configuration/
vi standalone.xml
Locate the element, and add the below to that block
Note: make sure to replace secret with the actual password!
<security-realm name="UndertowRealm">
<server-identities>
<ssl>
<keystore path="keycloak.jks" relative-to="jboss.server.config.dir" keystore-password="CEDAart34##$55" />
</ssl>
</server-identities>
</security-realm>
Locate the element, add this line below the default http listener
<https-listener name="https" socket-binding="https" security-realm="UndertowRealm"/>
Locate the <socket-binding-group element. You probably will need to modify the already existing https port. Change the line to the following:
<socket-binding name="https" port="${jboss.https.port:8543}"/>
###Verify the configuration
Start the server
gokk
./bin/standalone.sh
You will not be able to test the https port of keycloak from a browser at this moment, so please test it from the command line on the server:
lynx https://auth.metadatacenter.orgx:8543/