You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2021/02/05 21:44:00 UTC

[jira] [Resolved] (NIFI-1444) PostHTTP cannot work with public HTTPS sites

     [ https://issues.apache.org/jira/browse/NIFI-1444?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann resolved NIFI-1444.
------------------------------------
      Assignee: David Handermann  (was: Andy LoPresto)
    Resolution: Workaround

The problem described is not an issue with PostHTTP itself, but with the configuration of the {{SSLContextService}}.  In current versions of NiFi, it is possible to configure the {{StandardSSLContextService}} with a trust store file that points to the {{cacerts}} trust store located in the {{jre/lib/security}} directory of the Java home directory.  This option is not readily apparent, so implementing other options, such as described in NIFI-1477, might make this use case easier.

> PostHTTP cannot work with public HTTPS sites
> --------------------------------------------
>
>                 Key: NIFI-1444
>                 URL: https://issues.apache.org/jira/browse/NIFI-1444
>             Project: Apache NiFi
>          Issue Type: Bug
>    Affects Versions: 0.4.1
>            Reporter: Jeroen Jacobs
>            Assignee: David Handermann
>            Priority: Major
>
> Hi,
> I created a workflow in Apache NiFi, and the final processor needs to do a HTTP POST request to HipChat (it posts a message in a chat room). HipChat requires HTTPS, and it can't figure out why NiFi refuses to do this.
> I created a "StandardSSLContext" under "Controller Services", however, it says it requires that "TrustStore" or "KeyStore" needs to be populated.
> I have no clue what filenames I need to enter here. The documentation doesn't give you a clue either. I cannot imagine that I need to add every file under my /etc/ssl/certs folder, just be able to talk to public SSL-protected sites.
> What do I need to do to make the StandardSSLContext work with any public SSL site which has a valid SSL certificate? This should work out of the box IMHO.
> NiFi is installed on Ubuntu 14 btw.
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)