[jira] [Commented] (NIFI-9897) Refactor GRPC SSL Configuration

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/NIFI-9897?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17572688#comment-17572688 ] 

ASF subversion and git services commented on NIFI-9897:
-------------------------------------------------------

Commit 4e49a55e93cd1f5013c4c73146e53672c2d69a33 in nifi's branch refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=4e49a55e93 ]

NIFI-10295 Upgraded GRPC from 1.34.0 to 1.48.0

- Upgraded Protobuf from 3.14.0 to 3.21.4
- Removed netty-tcnative-boringssl-static as not necessary following NIFI-9897

This closes #6255.

Signed-off-by: Kevin Doran <kd...@apache.org>


> Refactor GRPC SSL Configuration
> -------------------------------
>
>                 Key: NIFI-9897
>                 URL: https://issues.apache.org/jira/browse/NIFI-9897
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Extensions
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Minor
>             Fix For: 1.17.0, 1.16.1
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> The {{InvokeGRPC}} and {{ListenGRPC}} Processors leverage Netty for socket protocol communication, and Netty requires its own [SslContext|https://netty.io/4.1/api/io/netty/handler/ssl/SslContext.html] configuration to support TLS communication.
> The current component implementations require {{nifi-security-utils}}, which includes a dependency on the Bouncy Castle library. Refactoring the Processors to use the Netty [JdkSslContext|https://netty.io/4.1/api/io/netty/handler/ssl/JdkSslContext.html] will enable direct usage of the Java [SSLContext|https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLContext.html] available through the NiFi {{SSLContextService.createContext()}} method. This approach would provide better encapsulation of {{SslContext}} configuration and remove the unnecessary dependency on the Bouncy Castle library in {{nifi-grpc-nar}}.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)