Quarkus keycloak db-password and keystore-password encryption in keycloak.conf

Configuring the server
1

I am implementing the quarkus keycloak as an Identity Access Manager.

One requirement is to encrypt db-password and Keystore password in the keycloak.conf.

Keeping the DB-password and Keystore password as plaintext is a security risk.

Is there any way to achieve that?

2

Hi,

Iā€™m trying to solve the same problem. Have you found a solution to encrypt the database password?

1 Like
3

No,

In some of the post they suggest to use quarkus.properties and filebased vault
I could not achieve from quarkus.properties.

Refer the analysis

https://github.com/keycloak/keycloak/issues/15548
https://github.com/keycloak/keycloak/issues/15740#issuecomment-1353019694

1 Like