[jira] [Updated] (NIFI-14049) Add PEM Encoded SSLContext Provider

["endzeit (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-14049?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

endzeit updated NIFI-14049:
---------------------------
    Fix Version/s: 2.1.0
       Resolution: Fixed
           Status: Resolved  (was: Patch Available)

> Add PEM Encoded SSLContext Provider
> -----------------------------------
>
>                 Key: NIFI-14049
>                 URL: https://issues.apache.org/jira/browse/NIFI-14049
>             Project: Apache NiFi
>          Issue Type: New Feature
>          Components: Extensions
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Major
>             Fix For: 2.1.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> With the addition of framework support for PEM Private Keys and Certificates, and the refactoring of the SSLContextService interface to introduce the SSLContextProvider interface, a new PEM-Encoded SSLContext Provider implementation should be added.
> Building on the capabilities introduced for framework support, the PEM-Encoded Provider implementation should support Private Keys encoded in either PKCS1 or PKCS8.
> The Provider should include a TLS Protocol property to configure the version supported for encrypted communication.
> The Provider should support configuring a Private Key and Certificate Chain through separate properties, aligning with the framework property approach. Separate properties should also support configuring PEM-encoded content as the property value or referencing a file location. 
> The Provider should include a property for the Private Key Source with an option that supports avoiding the configuration of Private Key and Certificate Chain properties. This option supports configuring custom certificate authorities without providing client or server identity information.
> In addition to the Private Key and Certificate Chain properties, the Provider should include a Certificate Authorities property that supports configuring one or more trusted certificates.
> A Certificate Authorities Source property should support an explicit System value indicating that the default Java system certificate authorities should be used.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)