[ 
https://issues.apache.org/jira/browse/AIRAVATA-2429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Marcus Christie updated AIRAVATA-2429:
--------------------------------------
    Description: 
Motivation: make it easier to deal with Let's Encrypt certificate renewals. 
Right now Keycloak is configured for SSL but the certificate is in a Keystore 
file (keycloak.jks).  We would need some sort of script to manipulate the 
keystore file each time we the Let's Encrypt certificate is renewed.

*Correction*: in SciGaP we aren't using Let's Encrypt for the SSL certification.

  was:Motivation: make it easier to deal with Let's Encrypt certificate 
renewals. Right now Keycloak is configured for SSL but the certificate is in a 
Keystore file (keycloak.jks).  We would need some sort of script to manipulate 
the keystore file each time we the Let's Encrypt certificate is renewed.


> Keycloak: use Apache to handle SSL and reverse proxy to Keycloak
> ----------------------------------------------------------------
>
>                 Key: AIRAVATA-2429
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2429
>             Project: Airavata
>          Issue Type: Bug
>            Reporter: Marcus Christie
>            Assignee: Marcus Christie
>
> Motivation: make it easier to deal with Let's Encrypt certificate renewals. 
> Right now Keycloak is configured for SSL but the certificate is in a Keystore 
> file (keycloak.jks).  We would need some sort of script to manipulate the 
> keystore file each time we the Let's Encrypt certificate is renewed.
> *Correction*: in SciGaP we aren't using Let's Encrypt for the SSL 
> certification.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to