You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2021/02/24 19:02:00 UTC

[jira] [Commented] (NIFI-8251) Add Encrypt and Decrypt PGP Processors and Services

    [ https://issues.apache.org/jira/browse/NIFI-8251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17290201#comment-17290201 ] 

David Handermann commented on NIFI-8251:
----------------------------------------

GitHub PR 4842 addresses a number of open issues related to PGP support in EncryptContent.  Successful review and merging of this PR should provide a resolution to the linked issues.

> Add Encrypt and Decrypt PGP Processors and Services
> ---------------------------------------------------
>
>                 Key: NIFI-8251
>                 URL: https://issues.apache.org/jira/browse/NIFI-8251
>             Project: Apache NiFi
>          Issue Type: New Feature
>          Components: Extensions
>    Affects Versions: 1.13.0
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Major
>              Labels: encryption, gpg, pgp, security
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The purpose of this issue is to create new Processors and Controller Services to perform encrypt and decrypt functions according to the OpenPGP specification defined in [RFC 4880|https://tools.ietf.org/html/rfc4880]. This functionality is implemented in the `EncryptContent` Processor, but the current approach is difficult to configure and troubleshoot in some cases.
> The new Controller Services should encapsulate management of keys and keyrings to improve performance and provide better error handling. New Controller Services would also support building additional Processors for signing and verifying PGP messages as requested in NIFI-7322. Separating encrypt and decrypt content functions into distinct Processors will provide a clearer distinction between the properties necessary for configuration.
> The implementation of these Processors and Controller Services should address the issues described in the following issues:
>  - NIFI-7396 Add encryption metadata attributes
>  - NIFI-6708 Support DSA and ElGamal keys
>  - NIFI-5346 Specify PGP key as property
>  - NIFI-5335 Support multiple keys in a PGP keyring
>  - NIFI-2983 Support decryption of signed messages
>  - NIFI-1694 Support keyring or individual key for encryption or decryption



--
This message was sent by Atlassian Jira
(v8.3.4#803005)