[jira] [Commented] (NIFI-2423) Add a sensitive property to store the trust store password in the consume/publish kafka processors

["Joseph Witt (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-2423?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15398255#comment-15398255 ] 

Joseph Witt commented on NIFI-2423:
-----------------------------------

please double and triple check that any possible kafka property we'd want to support that needs sensitive protection gets accounted for.  That is the least we can do here.  It would be better to have all TLS related properties exposed frankly but mvp in my view is any possible property that needs to be consider sensitive.

> Add a sensitive property to store the trust store password in the consume/publish kafka processors
> --------------------------------------------------------------------------------------------------
>
>                 Key: NIFI-2423
>                 URL: https://issues.apache.org/jira/browse/NIFI-2423
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>    Affects Versions: 0.7.0
>            Reporter: Arpit Gupta
>            Priority: Critical
>
> When user configures kafka processors to interact with SSL enabled protocol they need to set additional configs.
> ssl.truststore.location and ssl.truststore.password. 
> Today the trust store password is clear text. We should make that a default property and make it sensitive.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)