Keycloak with HTTPS & mutual TLS / X.509 authentication | Niko Köbler (@dasniko)

Encrypt everything!
Use your #Keycloak server with #HTTPS on the transport layer and do authentication with mutual #TLS with #X509 client certificates.

📖 Chapters:
0:00 - Intro
0:29 - Encrypt Everything!
1:40 - Setting up TLS in Keycloak
7:29 - x509.sh script
8:17 - (Client) Authentication with mutual TLS and X.509 certificates
14:28 - Configure the "X509/Validate Username Form"
18:00 - Actual authentication with the X.509 certificate in the browser
22:30 - Wrap up

🔗 Links:
📌 AWS re:Invent 2017 Keynote - Werner Vogels: https://youtu.be/nFKVzEAm-ts
📌 Creating self signed TLS certificates with self-signed root CA: https://gist.github.com/dasniko/b1aa115fd9078372b03c7a9f7e9ec189
📌 Keycloak Docker Container docs for setting up TLS: https://github.com/keycloak/keycloak-containers/blob/master/server/README.md#setting-up-tlsssl
📌 The x509.sh script: https://github.com/keycloak/keycloak-containers/blob/master/server/tools/x509.sh
Thanks for watching!
Don't forget to subscribe to my channel (if not already done) and give this video some thumbs up 👍 (aka "like").
Tell me about your experiences and in the comments. I'm looking forward to it! Thank YOU!

---

I'm Niko - and I'm an independent freelance software consultant, developer and trainer.
I'm here to help - you, your team and your company.
How can I support you? Just get in contact:

🌎 Website: https://www.n-k.de
🐦 Twitter: https://twitter.com/dasniko
🚧 GitHub Profile: https://github.com/dasniko
🎥 YouTube Channel: https://www.youtube.com/c/NikoKöbler?sub_confirmation=1

All things Cloud ☁️, Serverless, On-Premise, Java, JavaScript, All-End (Frontend, Backend, Fullstack Deployments), Authentication, Security 🔐, IAM, Keycloak, Containers, DevOps

Please understand that YouTube is not a good place to get support in case of errors. There are forums and groups out there which are the right place to ask!

Видео Keycloak with HTTPS & mutual TLS / X.509 authentication | Niko Köbler (@dasniko) канала Niko Köbler (@dasniko)