Adding the Certificate to Keycloak

Resonate RFID Reader Management 2.0 Software Installation Guide

For Resonate to trust the certificate on your SMTP server, you must add the certificate to Keycloak.

Add the certificate to the Keycloak truststore, by default, located at

/etc/ssl/certs/java/cacerts

Use a tool like Keytool to add the certificate to the truststore. Keytool requires that you set a password. Remember this password for later; you need to specify it when you add the certificate to the Keycloak truststore.

Create a ConfigMap using the certificate files:

kubectl create configmap certificates --from-file=cacerts=path/to/your/certs

Mount this ConfigMap into the Keycloak pod. To do so, edit the Keycloak deployment:

kubectl patch deployment keycloak -p '{"spec": {"template": {"spec":
{"volumes": [{"name": "certificates", "configMap": {"name":
"certificates"}}], "containers": [{"name": "keycloak", "volumeMounts":
[{"name": "certificates", "mountPath": "/etc/ssl/certs/java/cacerts"}]}]}}}'

If using a custom truststore, set the password for the truststore in the Keycloak deployment:

 kubectl patch deployment keycloak -p '{"spec": {"template": {"spec":
{"containers": [{"name": "keycloak", "env": [{"name": "JAVA_OPTS", "value":
"-Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -
Dfile.encoding=UTF-8 -Dsun.stdout.encoding=UTF-8 -Dsun.err.encoding=UTF-8 -
Dstdout.encoding=UTF-8 -Dstderr.encoding=UTF-8 -XX:+ExitOnOutOfMemoryError -
Djava.security.egd=file:/dev/urandom -XX:+UseParallelGC -
XX:MinHeapFreeRatio=10 -XX:MaxHeapFreeRatio=20 -XX:GCTimeRatio=4 -
XX:AdaptiveSizePolicyWeight=90 -
Djavax.net.ssl.trustStorePassword=password"}]}]}}}'

The password is at the end of the environment variable. Replace password with the password that you set when creating the truststore.

After you have added the certificate to your trust store, configure the SMTP settings in Keycloak. Refer to Configuring the SMTP Settings in Keycloak.