Install of keycloak completely break web interface

UCS - Univention Corporate Server
1

Everything was OK for me to upgrade to 5.2 except keycloak, I just need it for nextcloud, bur anyway,
I installed Keycloak for compatibility to upgrade to 5.2 but the install failed and I have lose the web interface, because apache2.service do not start because of a missing certificate.
I tried to generate the missing certificate with this

univention-certificate new -name ucs-sso-ng.domain.pf

Now I’m stuck

the /var/log/apache2/error.log says

[Thu Mar 06 10:05:19.805750 2025] [ssl:emerg] [pid 1356] AH02572: Failed to configure at least one certificate and key for ucs-sso-ng.domain.pf:443
[Thu Mar 06 10:05:19.810768 2025] [ssl:emerg] [pid 1356] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Thu Mar 06 10:05:19.810810 2025] [ssl:emerg] [pid 1356] AH02312: Fatal error initialising mod_ssl, exiting.
AH00016: Configuration Failed

any advice or direction ?

2

I did a Rollback anyway.
…
every times I install Keycloak, I can not log in as admin on ucs-sso-ng.domain/admin
is there a password reset, or what am I missing ?

3

I face the exact same issue on a fresh installation. Did you find a solution?

4

Did you follow either of the guides:

or
https://docs.software-univention.de/keycloak-migration/index.html

5

for my part, Yes I did (follow either of the guides). but there is always something that do not work in the process, and I am not sure it’s on my side…

@infty no solution at this time for me.