[keycloak] Could not open SSL root certificate file /opt/jboss/.postgresql/root.crt. about helm-charts

[tony-kerz]

that could be simpler than what i'm doing @akkie, i'll check it out when i get the chance.

the solution that i found for this is to set the JDBC_PARAMS env-var as follows:

    - name: JDBC_PARAMS
      # https://github.com/pgjdbc/pgjdbc/issues/1307
      #
      value: ssl=true,sslfactory=org.postgresql.ssl.DefaultJavaSSLFactory

looks like an issue in the postgres jdbc driver (see the above link)...

so i'll close this issue, thanks for the ideas @akkie and @unguiculus !

[unguiculus]

I never used _JAVA_OPTIONS. Could you try and see if this works:

keycloak:
  extraArgs: "-Djavax.net.ssl.trustStore=/tmp/cacerts.jks"

[akkie]

I'm also interested in a solution for this issue. @tony-kerz are there any news?

[akkie]

@tony-kerz if you add the cert to the default keystore, you don't need to specify a custom keystore.

Something like this:

FROM jboss/keycloak:6.0.1

USER root

COPY setu-ca.pem /etc/pki/CA/certs/setu-ca.pem
RUN openssl x509 -outform der -in /etc/pki/CA/certs/setu-ca.pem -out /etc/pki/ca-trust/source/anchors/setu-ca.crt
RUN update-ca-trust

USER 1000