Securing DB user/password
#10595
Replies: 2 comments 1 reply
-
|
Hi, I also have the same issue. Regards, |
Beta Was this translation helpful? Give feedback.
0 replies
-
|
The only way currently is to use environment variables for the Keycloak process. The same also applies to other secrets like the https-key-store-password (when using a pfx/p12). |
Beta Was this translation helpful? Give feedback.
1 reply
-
|
I created an issue ticket: #11089 |
Beta Was this translation helpful? Give feedback.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
On the Wildfly version, we were using initially picketbox SecureIdentityLoginModule to encrypt user/pwd in standalone.xml files.
We then switched to Elytron encrypted expressions on the latest releases of Keycloak.
But I cannot find anything in the Keycloak.X docs about such possibility.
And our customers' security guys (and DB admins...) tend to faint when you present them a config text file with clear text DB credentials... :-(
Is there anything I didn't found, or?...
Beta Was this translation helpful? Give feedback.
All reactions