Changing minimum RSA Key size

[pablo]

Hello @user123

Based on the answer from the mentioned thread, I find that issue is not related to security plug-in but to Apache CXF. 2048 limit is defined in Apache code.

OIDC Authentication troubleshooting issue: unable to view log details

The message is not very clear “INVALID_KEY” but as it has been raised by checkSignatureKeySize, I’ve been able to find that the minimum key length authorized is 2048 ( see code cxf/JwsUtils.java at main · apache/cxf · GitHub ). So we have to change the rsa key of our keycloak server which is a 1024 bit length.

In that case, the only solution is to change the key size in your OIDC IdP.