Keycloak as a OIDC provider

[Colin-988]

How can I provision Keycloak using OpenID Connect (OIDC) for secure authentication, and what is the correct syntax to specify a custom certificate in the PEM file format for Keycloak configuration?

[fufesou]

Hi, what OS do you use as the server?

#130 (comment)

[Colin-988]

Linux Host with Docker Container

[fufesou]

You can add the docker volume mapping, and set the path in docker.

[fufesou]

Hello, is the configuration ok?
Please post here if there are any problems.

[Colin-988]

Im new to Docker, could you help maybe help to map the volume in docker. i didnt started my container with docker compose.

[rustdesk]

https://docs.docker.com/storage/volumes/

[Colin-988]

is the syntax right?

[fufesou]

Hi, can you find where db.sqlite3 is? You can find it by running find data -name *.sqlite3.
You can put xxx.pem in the same directory of db.sqlite3.

Then you can use xxx.pem in the configuration input box.

[Colin-988]

still the same error, i placed my pem file into the directory where the db is located. (permissions of the file are the same like the db)

[fufesou]

Can you please try /root/xxx.pem in the input box?

[Colin-988]

its also not wokring, i checked the bash console of the container but the new pem file is not in the directory of the conatiner. I tryed to restart the container too

[fufesou]

Can you see *.sqlite3 in the directory of the container?

[fufesou]

Can you please show me how you run the docker container? thanks.

[Colin-988]

now i just copied the fie directly in the directory, now the certificate problem should be fixed. still getting an error but my container logs show no error.

[fufesou]

Please give full screenshot of the error, you can smudge out the url.

Please also check the log, it should record a more detailed error.

[Colin-988]

but could be an Keycloak problem, i check

[Colin-988]

Im currently running my web management console on http, its maybe also problem. Can you help me to setup https for that?

[rustdesk]

Here is tutorial of https setup: https://rustdesk.com/docs/en/self-host/rustdesk-server-pro/faq/#set-up-https-for-web-console-manually

[Colin-988]

I had to redeploy my container, now i had to setup everything. Is there any way to change the Private Key?

[rustdesk]

You can change it on web console, i guess it is not hard to find it for normal users.

[Colin-988]

sry i mean the public Key

[rustdesk]

Change private key, it will change public key. You can not change public key alone. It is part of private key.

[Colin-988]

So with the "old" Container i deployed some custom clients. Now when i try to connect it gives an connection Error (Keys mismatches)

[rustdesk]

#184

[Colin-988]

i dont have a backup from the old containers :D, is there any other possibility?

[rustdesk]

BTW, the data files (the private key file id_ed25519 etc in #184) are not in the docker container if you follow our docker command in doc, it is on your local drive, then mapping to docker volume (https://docs.docker.com/storage/volumes/).

e.g. sudo docker run --name hbbs -v ./data:/root -td --net=host --restart unless-stopped rustdesk/rustdesk-server-pro hbbs

-v ./data:/root is a volume mapping, ./data is the directory on your host, /root is the docker volume. hbbs writes all data files on /root, so you can see all data files under ./data on your host.

If you do not specify -v ./data:/root, you will do lose all data files after container killed.

[rustdesk]

ChatGPT is good at such thing.

[Colin-988]

I mean im still on the same server but didnt change the Key when i deploy the container?

[rustdesk]

If you lost the old private key, there is no way to restore it, we can not do magic, :(. we can get public key from private key, but no way to get private key from public key, because public key is a part of private key. You have to create new custom client on the new web console with new key.

If you have the old private key, you can paste it on new web console, or copy the id_ed25519 (private key) file to new working directory (where you can see db.sqlite3).

[Colin-988]

thx for the help #close