From caeaaf7c3064e8ef8d2df4b0bf762f5bca769aed Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Mon, 21 Oct 2024 12:34:17 +0200 Subject: [PATCH 01/12] Update README.md --- README.md | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/README.md b/README.md index c33230d..05461dc 100644 --- a/README.md +++ b/README.md @@ -1,9 +1,4 @@ -Requires: -* [GitHub CLI](https://cli.github.com/) +[my variable]: Something something -Scripts: - -* `kc-workflow-health.sh` - Show % success of workflows (`./kc-workflow-health.sh -d 3` will show % success last 3 days) -* `kc-ci-failures.sh` - Show failures in Keycloak CI workflow (`./kc-ci-failures.sh -d 3 -u` will show unique failures last 3 days) -* `kc-pr-ci-wait-time.sh` - Show waiting time from PR created/updated to CI complets (`./kc-pr-ci-wait-time.sh -d 7` will show wait time for PRs merged last 7 days) +[my variable] From fdd80e0de2e108f71b7f9b19981dc54d63e024ca Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Mon, 21 Oct 2024 12:34:38 +0200 Subject: [PATCH 02/12] Update README.md --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 05461dc..70e44ea 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,6 @@ +# Test -[my variable]: Something something [my variable] + +[my variable]: Something something From db88d6e0276960805cdd6b69b45ec63bdc50ae31 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Mon, 21 Oct 2024 12:36:23 +0200 Subject: [PATCH 03/12] Update README.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 70e44ea..15f0754 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # Test -[my variable] +[14] -[my variable]: Something something +[14]: Something something From 13ebf5821890abe8c5cdd490ff5aaf7fcf5114fd Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Mon, 21 Oct 2024 12:36:33 +0200 Subject: [PATCH 04/12] Update README.md --- README.md | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 15f0754..35f1a5e 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,17 @@ -# Test +markdown-playground +=================== +First Header | Second Header | Third Header +------------- | ------------- | ----------- +[oneone][11] | [12] | [13] +[21] | [twotwo][22] | [23] +[31] | [32] | [three trees][33] - -[14] - -[14]: Something something +[11]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=11 +[12]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=12 +[13]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=13 +[21]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=21 +[22]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=22 +[23]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=23 +[31]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=31 +[32]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=32 +[33]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=33 From 86f85ac5ad0f5a5731253f4f01e23dc870f026e5 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Mon, 21 Oct 2024 12:37:54 +0200 Subject: [PATCH 05/12] Update README.md --- README.md | 14 ++------------ 1 file changed, 2 insertions(+), 12 deletions(-) diff --git a/README.md b/README.md index 35f1a5e..0d03d3f 100644 --- a/README.md +++ b/README.md @@ -1,17 +1,7 @@ markdown-playground =================== -First Header | Second Header | Third Header -------------- | ------------- | ----------- -[oneone][11] | [12] | [13] -[21] | [twotwo][22] | [23] -[31] | [32] | [three trees][33] +[oneone][11] +[12] [11]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=11 [12]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=12 -[13]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=13 -[21]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=21 -[22]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=22 -[23]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=23 -[31]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=31 -[32]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=32 -[33]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=33 From 110c5a50ce37b8d46c9752f916ecc339df92d5b3 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Mon, 21 Oct 2024 12:39:49 +0200 Subject: [PATCH 06/12] Update README.md --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 0d03d3f..ae266aa 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ markdown-playground =================== -[oneone][11] -[12] +[link1] +[link2][something] -[11]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=11 -[12]: http://www.a-big-long-big-big-long-hyperlink/more-long-stuff?id=12 +[link1]: http://something "My first link" +[link2]: http://else "My second link" From 873237b418a17501a1b8486c082fb8d44329cfa4 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Tue, 22 Oct 2024 14:00:01 +0200 Subject: [PATCH 07/12] Create KC-BC-FIPS --- docs/KC-BC-FIPS | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 docs/KC-BC-FIPS diff --git a/docs/KC-BC-FIPS b/docs/KC-BC-FIPS new file mode 100644 index 0000000..f36b119 --- /dev/null +++ b/docs/KC-BC-FIPS @@ -0,0 +1,28 @@ +Add the following from https://www.bouncycastle.org/download/bouncy-castle-java-fips/#latest to `$KC_HOME/providers/`: +``` +bc-fips-2.0.0.jar +bcpkix-fips-2.0.7.jar +bctls-fips-2.0.19.jar +bcutil-fips-2.0.3.jar +``` + +Download Java from `https://adoptium.net/` and update `conf/security/java.security` file to have the following providers: + +``` +security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider +security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider fips:BCFIPS +security.provider.3=sun.security.provider.Sun +``` + +Note: Without `sun.security.provider.Sun` Keycloak doesn't start + +Generate a self-signed certificate for Keycloak: +``` +cd $KC_HOME/conf +openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 3650 -nodes -subj "/CN=localhost" +``` + +Start Keycloak with: +``` +bin/kc.sh start --features=fips --https-certificate-file=conf/cert.pem --https-certificate-key-file=conf/key.pem --hostname-strict=false +``` From 1e5fe9f7c5c506705b1b7dbc3e7a35a3ed11f390 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Tue, 22 Oct 2024 14:00:50 +0200 Subject: [PATCH 08/12] Update KC-BC-FIPS --- docs/KC-BC-FIPS | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/docs/KC-BC-FIPS b/docs/KC-BC-FIPS index f36b119..4080fb1 100644 --- a/docs/KC-BC-FIPS +++ b/docs/KC-BC-FIPS @@ -26,3 +26,39 @@ Start Keycloak with: ``` bin/kc.sh start --features=fips --https-certificate-file=conf/cert.pem --https-certificate-key-file=conf/key.pem --hostname-strict=false ``` + +### SHA-1 not available + +Without `sun.security.provider.Sun ` the following error is thrown on startup: + +``` +Exception in thread "main" java.lang.reflect.InvocationTargetException + at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:118) + at java.base/java.lang.reflect.Method.invoke(Method.java:580) + at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:62) + at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:33) +Caused by: java.lang.InternalError: internal error: SHA-1 not available. + at java.base/sun.security.provider.SecureRandom.init(SecureRandom.java:116) + at java.base/sun.security.provider.SecureRandom.(SecureRandom.java:87) + at java.base/java.security.SecureRandom.getDefaultPRNG(SecureRandom.java:293) + at java.base/java.security.SecureRandom.(SecureRandom.java:225) + at java.base/java.util.UUID$Holder.(UUID.java:104) + at java.base/java.util.UUID.randomUUID(UUID.java:150) + at io.quarkus.runtime.configuration.ConfigUtils.configBuilder(ConfigUtils.java:67) + at io.quarkus.runtime.configuration.QuarkusConfigFactory.getConfigFor(QuarkusConfigFactory.java:27) + at io.smallrye.config.SmallRyeConfigProviderResolver.getConfig(SmallRyeConfigProviderResolver.java:78) + at io.smallrye.config.SmallRyeConfigProviderResolver.getConfig(SmallRyeConfigProviderResolver.java:66) + at org.keycloak.quarkus.runtime.configuration.Configuration.getConfig(Configuration.java:79) + at org.keycloak.quarkus.runtime.configuration.Configuration.getBuildTimeProperty(Configuration.java:101) + at org.keycloak.quarkus.runtime.cli.Picocli.requiresReAugmentation(Picocli.java:250) + at org.keycloak.quarkus.runtime.cli.Picocli.runReAugmentationIfNeeded(Picocli.java:227) + at org.keycloak.quarkus.runtime.cli.Picocli.parseAndRun(Picocli.java:132) + at org.keycloak.quarkus.runtime.KeycloakMain.main(KeycloakMain.java:106) + at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103) + ... 3 more +Caused by: java.security.NoSuchAlgorithmException: SHA MessageDigest not available + at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:159) + at java.base/java.security.MessageDigest.getInstance(MessageDigest.java:185) + at java.base/sun.security.provider.SecureRandom.init(SecureRandom.java:114) + ... 19 more +``` From 6c8213369f3986f314ac1043310887c04ebe1de6 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Tue, 22 Oct 2024 14:01:28 +0200 Subject: [PATCH 09/12] Rename docs/KC-BC-FIPS to docs/FIPS/README.md --- docs/{KC-BC-FIPS => FIPS/README.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename docs/{KC-BC-FIPS => FIPS/README.md} (100%) diff --git a/docs/KC-BC-FIPS b/docs/FIPS/README.md similarity index 100% rename from docs/KC-BC-FIPS rename to docs/FIPS/README.md From 58394ec1f82898fb77ba5dba68b8f49cbcc62660 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Tue, 29 Oct 2024 08:47:28 +0100 Subject: [PATCH 10/12] Delete .github/workflows/dynamic-matrix-poc.yml --- .github/workflows/dynamic-matrix-poc.yml | 52 ------------------------ 1 file changed, 52 deletions(-) delete mode 100644 .github/workflows/dynamic-matrix-poc.yml diff --git a/.github/workflows/dynamic-matrix-poc.yml b/.github/workflows/dynamic-matrix-poc.yml deleted file mode 100644 index 5a0e84f..0000000 --- a/.github/workflows/dynamic-matrix-poc.yml +++ /dev/null @@ -1,52 +0,0 @@ -name: Dynamic Matrix Test - -on: - workflow_dispatch: - -jobs: - define-matrix: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v3 - with: - fetch-depth: 2 - - run: | - if [ ${{ github.event_name }} == 'pull_request' ]; then - echo "Changes:" - git diff --name-only HEAD^ - echo "" - fi - - echo 'MATRIX<> $GITHUB_ENV - echo '[' >> $GITHUB_ENV - echo '{ "server": "quarkus", "tests": "LoginTest" }' >> $GITHUB_ENV - if [ ${{ github.event_name }} != 'pull_request' ] || ( git diff --name-only HEAD^ | grep -q '^undertow/' ); then - echo ', { "server": "undertow", "tests": "LogoutTest" }' >> $GITHUB_ENV - fi - echo ']' >> $GITHUB_ENV - echo 'EOF' >> $GITHUB_ENV - outputs: - matrix: ${{ env.MATRIX }} - - echo: - needs: define-matrix - - runs-on: ubuntu-latest - - steps: - - name: Echo - run: | - echo "${{ needs.define-matrix.outputs.matrix }}" - - greet: - needs: define-matrix - strategy: - matrix: - include: ${{ fromJson(needs.define-matrix.outputs.matrix) }} - - runs-on: ubuntu-latest - - steps: - - name: Echo - run: | - echo "${{ matrix.server }} ${{ matrix.tests }}" From 9dcde068b24553e59df7260b12597356cecaaf79 Mon Sep 17 00:00:00 2001 From: Stian Thorgersen Date: Tue, 29 Oct 2024 08:47:40 +0100 Subject: [PATCH 11/12] Delete .github/workflows/junit-flaky.yml --- .github/workflows/junit-flaky.yml | 46 ------------------------------- 1 file changed, 46 deletions(-) delete mode 100644 .github/workflows/junit-flaky.yml diff --git a/.github/workflows/junit-flaky.yml b/.github/workflows/junit-flaky.yml deleted file mode 100644 index c961bf4..0000000 --- a/.github/workflows/junit-flaky.yml +++ /dev/null @@ -1,46 +0,0 @@ -name: Keycloak CI - -on: - pull_request: - push: - workflow_dispatch: - -jobs: - base-integration-tests: - name: Base IT - runs-on: ubuntu-latest - strategy: - matrix: - group: [1, 2] - steps: - - uses: actions/checkout@v3 - - uses: actions/setup-java@v3 - with: - distribution: 'temurin' - java-version: 11 - cache: 'maven' - - run: - mvn install -Dsurefire.rerunFailingTestsCount=100 -f junit-testsuite-poc/pom.xml - - uses: ./.github/actions/report-flaky-test - env: - GH_TOKEN: ${{ github.token }} - with: - job-name: Base IT - - unit-tests: - name: Unit Tests - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v3 - - uses: actions/setup-java@v3 - with: - distribution: 'temurin' - java-version: 11 - cache: 'maven' - - run: - mvn install -Dsurefire.rerunFailingTestsCount=100 -f junit-testsuite-poc/pom.xml - - uses: ./.github/actions/report-flaky-test - env: - GH_TOKEN: ${{ github.token }} - with: - job-name: Unit Tests \ No newline at end of file From 55003fbbd64e0b03466967dcb0094c2d113649f0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 07:48:18 +0000 Subject: [PATCH 12/12] Bump org.keycloak:keycloak-core in /kc-ext/theme-preview Bumps [org.keycloak:keycloak-core](https://github.com/keycloak/keycloak) from 24.0.1 to 25.0.4. - [Release notes](https://github.com/keycloak/keycloak/releases) - [Commits](https://github.com/keycloak/keycloak/compare/24.0.1...25.0.4) --- updated-dependencies: - dependency-name: org.keycloak:keycloak-core dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- kc-ext/theme-preview/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kc-ext/theme-preview/pom.xml b/kc-ext/theme-preview/pom.xml index 89dcb63..e1ffec4 100644 --- a/kc-ext/theme-preview/pom.xml +++ b/kc-ext/theme-preview/pom.xml @@ -9,7 +9,7 @@ 1.0-SNAPSHOT - 24.0.1 + 25.0.4 17 17