You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Nathan Gough (Jira)" <ji...@apache.org> on 2021/01/26 22:00:06 UTC

[jira] [Updated] (NIFI-8088) Remove PKCS12 Deprecation Warning in KeyStoreUtils

     [ https://issues.apache.org/jira/browse/NIFI-8088?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Nathan Gough updated NIFI-8088:
-------------------------------
    Resolution: Fixed
        Status: Resolved  (was: Patch Available)

> Remove PKCS12 Deprecation Warning in KeyStoreUtils
> --------------------------------------------------
>
>                 Key: NIFI-8088
>                 URL: https://issues.apache.org/jira/browse/NIFI-8088
>             Project: Apache NiFi
>          Issue Type: Improvement
>    Affects Versions: 1.12.1
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Minor
>              Labels: pkcs12, security
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> KeyStoreUtils.getTrustStore() logs a warning message indicating the PKCS12 trust stores are deprecated in favor of JKS.  JEP 229 changed the default key store type to PKCS12 starting with Java 9.  The Site to Site Client, GetHTTP, and PostHTTP Processors use the KeyStoreUtils.getTrustStore() method.  The method itself checks the trust store type, logs the warning for PKCS12 and delegates to KeyStoreUtils.getKeyStore().
> References to KeyStoreUtils.getTrustStore() should be replaced with KeyStoreUtils.getKeyStore() and the getTrustStore() method should be removed to avoid confusing log warnings in deployments where PKCS12 trust stores are used.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)