Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
DevServices for Keycloak fails to start on RHEL with enabled FIPS mode
See original GitHub issueDescribe the bug
Method KeycloakDevServicesProcessor.startKeycloakContainer fails, when running on FIPS-enabled machine.
Expected behavior
DevServices for Keycloak should work on FIPS-enabled machine
Actual behavior
No response
How to Reproduce?
- Verify, that machine uses FIPS.
$ cat /proc/sys/crypto/fips_enabled
1
- Clone Quarkus quickstarts:
git@github.com:quarkusio/quarkus-quickstarts.git - Enter the folder
cd quarkus-quickstarts/security-keycloak-authorization-quickstart - Run
mvn clean verify - We will get an error, when starting container
quay.io/keycloak/keycloak:15.0.2:
2022-01-28 13:42:09,087 ERROR [🐳 .io/.0.2]] (build-54) Log output from the failed container:
java.lang.RuntimeException: PBKDF2 algorithm not found
Apache Maven 3.8.3 (ff8e977a158738155dc465c6a97ffaf31982d739) Maven home: /opt/apache-maven-3.8.3 Java version: 11.0.13, vendor: Red Hat, Inc., runtime: /qa/tools/opt/x86_64/openjdk-11.0.13.0.8
Output of uname -a or ver
4.18.0-305.el8.x86_64
Output of java -version
11.0.13, vendor: Red Hat
GraalVM version (if different from Java)
No response
Quarkus version or git rev
2.6.3.Final
Build tool (ie. output of mvnw --version or gradlew --version)
Apache Maven 3.8.3 (ff8e977a158738155dc465c6a97ffaf31982d739)
Additional information
I tried to start different keycloak containers manually, and it looks like docker hub keycloak container works fine:
docker run quay.io/keycloak/keycloak:15.0.2 # fails, but without any mention of PDKF2
docker run jboss/keycloak:15.0.2 # works
Issue Analytics
- State:
- Created 2 years ago
- Comments:13 (12 by maintainers)
Top Results From Across the Web
Top Related Medium Post
Top Related StackOverflow Question
Troubleshoot Live Code
Top Related Reddit Thread
Top Related Hackernoon Post
Top Related Tweet
Top Related Dev.to Post
Top Related Hashnode Post
@fedinskiy Please note the documented workaround from Stian in the https://github.com/keycloak/keycloak/issues/9916 description
Closing it as it is a pure Keycloak issue, the same workaround which was implemented at https://github.com/quarkus-qe/quarkus-test-suite/pull/581/files can be support for
DevServces for Keycloakwithquarkus.keycloak.devservices.java-opts=-Dcom.redhat.fips=false