Steve Hawkins f835f49065 fix: remove ANY mode modification of truststores ...

also note that ANY should not be used in production

closes: CVE-2025-3501

Add a test for the error (#1)

Signed-off-by: Ricardo Martin <rmartinc@redhat.com>

Update docs/guides/server/keycloak-truststore.adoc

Co-authored-by: Marek Posolda <mposolda@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

2025-04-24 11:44:33 +02:00

..

all-config.adoc

Add attributes.adoc for guides to share common attributes (#24519)

2023-11-08 15:09:04 +01:00

all-provider-config.adoc

…

bootstrap-admin-recovery.adoc

fix: adding consistent language for the non-server commands (#32317)

2024-08-22 08:37:07 +02:00

caching.adoc

Add Network Ports section for Keycloak < 26.1

2025-02-11 15:00:16 +01:00

configuration-metrics.adoc

Fix typos found by codespell in docs (#28890)

2024-05-03 12:41:16 +00:00

configuration-production.adoc

Document how Admin REST API endpoints work with Hostname config

2024-06-28 09:31:41 +02:00

configuration-provider.adoc

Ability to set the default provider for an SPI (#28135)

2024-03-22 07:45:08 +01:00

configuration.adoc

fix: removing doc that suggests using the config file for quarkus props

2025-01-13 17:45:24 +01:00

containers.adoc

fix: correcting the container examples wrt hostname (#33542) (#33584)

2024-10-04 14:00:11 +02:00

db.adoc

Rename Dockerfile to Containerfile in the docs

2024-08-30 13:22:22 +02:00

directory-structure.adoc

Update installation locations (#34871)

2024-11-13 12:34:54 +01:00

enabletls.adoc

Fix runaway formatting

2024-10-04 14:07:02 +02:00

features.adoc

docs: remove reference to features-disabled=default (#30612)

2024-06-25 11:08:45 +02:00

fips.adoc

Document users hashed passwords with argon2 does not work in FIPS environment

2024-10-03 08:47:45 +02:00

health.adoc

Rename Dockerfile to Containerfile in the docs

2024-08-30 13:22:22 +02:00

hostname.adoc

fix: updating the partially dynamic url to not include path

2025-01-13 17:46:15 +01:00

importExport.adoc

Remove inaccurate statement about master realm imports (#34544)

2024-10-31 13:31:40 +01:00

index.adoc

Add attributes.adoc for guides to share common attributes (#24519)

2023-11-08 15:09:04 +01:00

keycloak-truststore.adoc

fix: remove ANY mode modification of truststores

2025-04-24 11:44:33 +02:00

logging.adoc

[PERF] OpenTelemetry is initialized even when disabled (#34032)

2024-10-17 15:54:19 +02:00

management-interface.adoc

Redirect to relative-path from the root path (#32868)

2024-09-18 16:37:28 +02:00

mutual-tls.adoc

Undeprecate https-trust-store-* options and enhance mTLS docs

2024-09-27 18:07:57 +02:00

outgoinghttp.adoc

Undeprecate https-trust-store-* options and enhance mTLS docs

2024-09-27 18:07:57 +02:00

pinned-guides

fix: adding a server guide on installation location / layout (#33604) (#34158)

2024-10-21 18:05:51 +00:00

reverseproxy.adoc

Update docs with security warning around client certificate lookup (#213)

2024-11-13 16:18:20 +01:00

tracing.adoc

OTEL: Profile Feature

2024-08-30 13:19:09 +02:00

vault.adoc

Sorting the chapters of the HA guide (#38834)

2025-04-15 10:28:40 +02:00