Commit graph

31 commits

Author SHA1 Message Date
Václav Muzikář
3560286f0d
Update docs to better reflect FIPS support with Java 25. (#47699)
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-04-02 15:04:15 +02:00
Václav Muzikář
d7238a77ba
Clarify Java 25 support scope in docs (#47539)
Closes #47537

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-04-01 15:20:37 +02:00
Marek Posolda
48b1d0fed9
Clarify in FIPS docs that it is still recommended to use Java 21 (#47623)
closes #47621

Signed-off-by: mposolda <mposolda@gmail.com>
2026-04-01 09:58:09 +02:00
Alexander Schwartz
52ba359cc3
Make client and IDP required when using federated client authentication (#43890)
Closes #43889

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-11-03 07:21:55 +01:00
rmartinc
248d6d1feb Upgrade xmlsec to 3.0.4 and remove KeycloakFipsSecurityProvider workaround
Closes #43263

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-13 15:38:58 +02:00
rmartinc
94a4e062f7 Add a debug statement when the KeycloakFipsSecurityProvider is created
Closes #43015

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-07 16:59:22 +02:00
rmartinc
a44758d4ae Upgrade bc-fips testing and documentation to 2.1.2
Closes #42958

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-29 09:04:43 +02:00
andymunro
75cc28a9d1
Clarify FIPS instructions
Closes #40533

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-06-17 09:54:46 +02:00
Steven Hawkins
76bc9fadcb
fix: adding a -- separator for spi options (#40005)
* fix: adding a -- separator for spi options

closes: #39063

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a warning for ambiguous spi options

also adding a note about the change

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/documentation/upgrading/topics/changes/changes-26_3_0.adoc

* updating docs to the new format

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/guides/high-availability/examples/generated/keycloak-ispn.yaml
#	docs/guides/high-availability/examples/generated/keycloak.yaml

* internally using the new spi options

also adding a deprecation notice

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* correcting options output

adding + + inlining where needed

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding test showing the env mapping with __

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 16:13:53 +02:00
andymunro
75557bc312
Adjust introductory sentences
Closes #39008

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-04-25 09:18:04 +02:00
James Nord
3356b9bfea
fix incorrect statement about BC FIPS licences (#36680)
closes #36679

Signed-off-by: James Nord <jtnord@users.noreply.github.com>
2025-01-23 10:32:54 +01:00
mposolda
41c72d46d2 Document users hashed passwords with argon2 does not work in FIPS environment
closes #33296

Signed-off-by: mposolda <mposolda@gmail.com>

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
2024-10-03 08:47:45 +02:00
mposolda
8f038f19dd Upgrade BCFIPS to 2.0
closes #30415

Signed-off-by: mposolda <mposolda@gmail.com>
2024-09-26 06:52:21 +02:00
Peter Zaoral
7019287a67 Rename Dockerfile to Containerfile in the docs
Closes: #27947

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-08-30 13:22:22 +02:00
rmartinc
764ef4831a Release notes and some notes for JavaKeystoreProvider changes
Closes #31226

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-07-17 10:44:45 +02:00
rmartinc
e9c9efc3f4 Upgrade bc-fips to 1.0.2.5
Closes #26568
Closes #27884

Signed-off-by: rmartinc <rmartinc@redhat.com>
2024-06-25 11:07:27 +02:00
Andre F de M
0f061a75e2 Issue: 26568 - bcfips version bump and fixes
* bump BCFIPS to 1.0.2.5
               * fix bc-fips related test error
               * remove unused imports

               Closes: #26568

Signed-off-by: Andre F de M <trixpan@users.noreply.github.com>
2024-06-25 11:07:27 +02:00
Martin Bartoš
262fc09edc
OpenJDK 21 support (#28518)
* OpenJDK 21 support

Closes #28517

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* x509 SAN UPN other name is not handled in JDK 21 (#904)

closes #29968

Signed-off-by: mposolda <mposolda@gmail.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2024-06-03 14:17:28 +02:00
Dimitri Papadopoulos Orfanos
9db1443367
Fix typos found by codespell in docs (#28890)
Run `chmod -x` on files that need not be executable.

Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-05-03 12:41:16 +00:00
AndyMunro
0e5d685cd3 Revise use of Keycloak term
Closes #27953

Signed-off-by: AndyMunro <amunro@redhat.com>
2024-03-18 09:50:26 +01:00
mposolda
1f80f561db Update version of bctls-fips in the docs
closes #27882

Signed-off-by: mposolda <mposolda@gmail.com>
2024-03-14 08:58:34 +01:00
Alexander Schwartz
486b199548 Make label for Keycloak container images configurable
Closes #26819

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-06 16:16:00 +01:00
Stian Thorgersen
565bc7d664
Add attributes.adoc for guides to share common attributes (#24519) 2023-11-08 15:09:04 +01:00
AndyMunro
a4b5d66aa0 Minor fixes for FIPS and Operator Guide
Closes #24513
2023-11-03 11:00:55 +01:00
Stephen Morris
17389e6e29
Fixed some typographical and language usage issues in fips.adoc (#24056)
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2023-10-20 10:02:47 +02:00
mposolda
d4a793be64 Update FIPS 140-2 documentation to clarify default keystore format
closes #23053
2023-09-20 16:15:32 -03:00
Alexander Schwartz
bcfadfc430 Use Freemarker links between different guide pages
Closes #22345
2023-08-16 16:32:08 +02:00
Peter Zaoral
f4cc6d7b76 Update the docs
* updated the release notes
* updated the FIPS guide

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2023-06-07 09:23:12 -03:00
mposolda
85d2c41a62 Switch FIPS automated test to ubi8 instead of ubi9
closes #19977
2023-04-27 12:06:21 +02:00
mposolda
863d28e232 Promote FIPS 140-2 to supported in Keycloak 22
closes #17234
2023-04-12 15:29:54 +02:00
Alexander Schwartz
af0bdd71d3
Move guides to /docs/guides so they are simpler to find and maintain (#17378)
CIAM-5057
2023-03-03 10:08:05 +00:00
Renamed from docs/guides/src/main/server/fips.adoc (Browse further)