Hi,

We have implemented a custom-credential-store to provide (HW based) passwords to open the pkcs12 certificates for our keycloak (m)TLS setup. The passwords are provided by a system library (so) which has a jndi binding for java. The passwords are never written in clear text...

The custom credential store is an extension for Wildfly/Elytron like this:

https://github.com/esanya/elytron-examples/tree/master/custom-credential-store

Our question would be: how to implement this functionality in the quarcus based Keycloak?

Thanks,
Regards,
Sandor