You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Martin Zink (Jira)" <ji...@apache.org> on 2021/02/01 14:28:00 UTC

[jira] [Commented] (MINIFICPP-1453) Ability to disable older TLS versions in MiNiFi C++ agents

    [ https://issues.apache.org/jira/browse/MINIFICPP-1453?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17276362#comment-17276362 ] 

Martin Zink commented on MINIFICPP-1453:
----------------------------------------

The tests that verify that only TLS v1.2 is supported have been merged. (commit id f50d87d6048795d7ed977bfa49e7f61aeb30c500)

> Ability to disable older TLS versions in MiNiFi C++ agents
> ----------------------------------------------------------
>
>                 Key: MINIFICPP-1453
>                 URL: https://issues.apache.org/jira/browse/MINIFICPP-1453
>             Project: Apache NiFi MiNiFi C++
>          Issue Type: Improvement
>            Reporter: Martin Zink
>            Assignee: Martin Zink
>            Priority: Minor
>          Time Spent: 6h 40m
>  Remaining Estimate: 0h
>
> Currently on minifi C++ agents communication with C2 using older TLS security protocols (e.g. TLS v1, TLS v1.1) cannot be explicitly disabled. (unlike on the java agents where this can be achieved with the _nifi.minifi.security.ssl.protocol_ config parameter)
> This might be a security requirement for various use-cases.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)