Description

• Changes done in Support for vault and AES and HMAC algorithms to JavaKeystoreKeyProvider #30957 (GH issues Add vault support to JavaKeystoreKeyProvider #30880 and Support AES and HMAC Key-Imports for the JavaKeystoreKeyProvider #29755) worth to be mentioned in the release notes for Keycloak 26
• It can be also good to clarify bit a line https://github.com/keycloak/keycloak/pull/30957/files#diff-5ca80c42b69e38a7e987e592e8304d65ec4ded5965137cf7cbc635d6464aeeadR141 . For instance, it mentions that JKS and PKCS12 in fips modes (provider BCFIPS) cannot store secret key entries. . But JKS does not support secret keys even in non-fips mode
• Will be probably good to cross-document some keystore limitations in the FIPS section of the documentation. Or possibly just add the link from FIPS section to this server admin guide section about keystore provider?

Discussion

No response

Motivation

No response

Details

No response