Skip to content

[26.6] Fix of getting client keystore without private pem. - #55050

Open
lhanusov wants to merge 2 commits into
keycloak:release/26.6from
lhanusov:backport-54006-26.6
Open

lhanusov wants to merge 2 commits into
keycloak:release/26.6from
lhanusov:backport-54006-26.6

Conversation

@lhanusov

Copy link
Copy Markdown
Contributor

Closes #49240

Signed-off-by: Lukas Hanusovsky lhanusov@redhat.com
(cherry picked from commit 39e1854)

Original PR: #54006

Co-authored by: Codex noreply@openai.com

@lhanusov
lhanusov marked this pull request as ready for review November 11, 2026 15:11
@lhanusov
lhanusov requested a review from a team as a code owner November 11, 2026 15:11
@mposolda mposolda self-assigned this Nov 12, 2026
mposolda
mposolda previously approved these changes Nov 12, 2026

@mposolda mposolda left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lhanusov It seems that test failure in the "Base1 testsuite" (and likely also some other groups) is related to this PR itself. Can you please check?

@lhanusov
lhanusov force-pushed the backport-54006-26.6 branch 2 times, most recently from 81329c3 to 2c61051 Compare November 12, 2026 11:48
@lhanusov
lhanusov requested review from a team as code owners November 13, 2026 11:38
@lhanusov
lhanusov force-pushed the backport-54006-26.6 branch from 9202960 to 15a5bfd Compare November 13, 2026 11:52
lhanusov and others added 2 commits November 13, 2026 12:58
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

(cherry picked from commit 39e1854)
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Backport the client private-key storage changes to release/26.6 after the certificate-only download fix.
Use the standard private JWK claim names because 26.6 does not provide the newer signature-provider claim discovery API; retain existing helper signatures and verify filtering for RSA, EC, OKP, and symmetric JWKs.
Adapt the test fixture references and publish the upgrade guidance under 26.6.9.

Closes keycloak#49239

(cherry picked from commit 1ae1dba)

Signed-off-by: Jimmy Chakkalakal <jimmy.chakkalakal@ibm.com>
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
@lhanusov
lhanusov force-pushed the backport-54006-26.6 branch from 15a5bfd to 7fb99a7 Compare November 13, 2026 11:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants