You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2021/02/02 17:59:00 UTC

[jira] [Updated] (NIFIREG-434) Support BCFKS Keystore Type

     [ https://issues.apache.org/jira/browse/NIFIREG-434?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann updated NIFIREG-434:
-------------------------------------
    Issue Type: New Feature  (was: Improvement)

> Support BCFKS Keystore Type
> ---------------------------
>
>                 Key: NIFIREG-434
>                 URL: https://issues.apache.org/jira/browse/NIFIREG-434
>             Project: NiFi Registry
>          Issue Type: New Feature
>    Affects Versions: 0.8.0
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Minor
>              Labels: FIPS, security
>          Time Spent: 1h 10m
>  Remaining Estimate: 0h
>
> The [Bouncy Castle FIPS Key Store|https://cryptosense.com/blog/bouncycastle-keystore-security/] (BCFKS) format supports storage of certificates and private keys using AES-CCM and PBKDF2 algorithms, providing greater security than the standard JKS and PKCS12 implementations. Support for BCFKS can be implemented using Bouncy Castle security provider libraries that are already leveraged throughout the system.
> Initial support should include the ability to specify BCFKS as the key store and trust store type in standard properties files.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)