Java KeyClope无法连接到Windows上运行的SQL Server

KeyClope容器无法建立到远程SQL Server数据库的连接，并卡在启动循环中

容器日志的输出：

{"logs":"Caused by: com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: \"Certificates do not conform to algorithm constraints\". ClientConnectionId:8c3fca80-a572-4014-abe0-6e55adf39c44

{"logs":"Caused by: javax.net.ssl.SSLHandshakeException: Certificates do not conform to algorithm constraints

{"logs":"Caused by: java.security.cert.CertificateException: Certificates do not conform to algorithm constraints

{"logs":"Caused by: java.security.cert.CertPathValidatorException: Algorithm constraints check failed on keysize limits. RSA 1024bit key used with certificate:
 CN=SSL_Self_Signed_Fallback.  Usage was tls server

{"logs":"\u001B[0m\u001B[31m12:14:07,280 FATAL [org.keycloak.services] (ServerService Thread Pool -- 56) java.lang.RuntimeException: Failed to connect to database

我在Linux机器上的docker容器中运行KeyClope版本10.0.1，SQL Server 2012 DB托管在Windows机器上。我已经在SQL Server上启用了TCP/IP协议，并将其配置为侦听所有地址

---

当我将容器指向在另一台Linux机器上运行的SQL Server时，效果绝对良好。

Windows机器

哪个版本的Windows？您是否在证书上尝试了2048位RSA密钥，该密钥在Windows Server 2012 R2上运行时是标准且更安全的。您的意思是在SQL Server上分配证书？SSL证书SQL Server 2014及更早版本使用其命令生成1024位私钥。您需要放松keydape约束，或者找到一种方法用另一个具有2048位私钥的证书替换目标服务器的自签名证书。