Listen 4443 https <VirtualHost *:4443> SSLEngine On SSLCertificateFile /certs/s1.demo.fr.crt.CERT SSLCertificateKeyFile /certs/s1.demo.fr.pem.KEY SSLCACertificatePath /certs/ca/ DocumentRoot /var/www/html ServerName s1.demo.fr ServerAdmin webmaster@localhost OIDCCryptoPassphrase password OIDCProviderMetadataURL http://keycloak.demo.fr:8080/auth/realms/master/.well-known/openid-configuration OIDCProviderTokenEndpointAuth client_secret_basic OIDCClientID client1 OIDCClientSecret 8c53c833-7c8a-4e5a-b3b8-166249171d26 OIDCRedirectURI https://s1.demo.fr:4443/client1/redirect OIDCSSLValidateServer Off OIDCOAuthSSLValidateServer Off OIDCRemoteUserClaim family_name OIDCScope "openid email" <Location /keycloakoidc >    AuthType openid-connect    Require valid-user #    Loglevel debug </Location> </VirtualHost>