[jira] [Resolved] (NIFI-2454) OpenJDK + NiFi 1.0 causes https access issues via Firefox

["Mike Thomsen (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-2454?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mike Thomsen resolved NIFI-2454.
--------------------------------
    Resolution: Fixed

Closing this because OpenJDK has been our main build and deployment target for a few years now and no one else is seeing this issue w/ Firefox. Feel free to reopen if you can duplicate on a new build of OpenJDK 8 or 11 w/ latest Firefox.

> OpenJDK + NiFi 1.0 causes https access issues via Firefox
> ---------------------------------------------------------
>
>                 Key: NIFI-2454
>                 URL: https://issues.apache.org/jira/browse/NIFI-2454
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework, Core UI
>    Affects Versions: 1.0.0
>         Environment: Azure VMs running Redhat 7.0 and OpenJDK 8u101 
> MAC Firefox version (47.0.1)
> and/or
> Openstack VMs running Centos 7 and OpenJDK 8u101
> MAC Firefox version (47.0.1) being used to access UI
>            Reporter: Matthew Clarke
>            Priority: Critical
>
> When running nifi1.0 with OpenJDK versions of Java, access to the UI is blocked when using Firefox (version 47.0.1).  Chrome (Version 51.0.2704.103 (64-bit)) browser continues to allow access.
> After changing from OpenJDK to Oracle JDK 8u101, access is no longer blocked by Firefox browser.
> https://support.mozilla.org/en-US/kb/secure-connection-failed-error-message
>  
> The above Mozilla kb covers the exact error we are encountering:
> -----------------
> Secure connection cannot be established
> When a website you visit attempts to secure communication between your computer and the website, Firefox cross-checks this attempt to ensure that the certificate and the method the website is using are actually secure.
> Some websites try using out-dated (no longer secure) TLS mechanisms in an attempt to secure your connection. Firefox protects you by preventing navigation to such sites if there is a problem in securely establishing a connection. When this happens, you will see an error page with the option to report the error to Mozilla.
> -------------------
> Using the same keystores and truststores with nifi 0.6.1 running openJDK on these VMs does not result in this Firefox issue.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)