You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2021/09/28 16:26:00 UTC
[jira] [Resolved] (NIFI-1525) Audit use of private keys throughout
application
[ https://issues.apache.org/jira/browse/NIFI-1525?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
David Handermann resolved NIFI-1525.
------------------------------------
Resolution: Information Provided
Closing based on history and scope, further analysis could be performed on a case-by-case basis.
> Audit use of private keys throughout application
> ------------------------------------------------
>
> Key: NIFI-1525
> URL: https://issues.apache.org/jira/browse/NIFI-1525
> Project: Apache NiFi
> Issue Type: Task
> Components: Core Framework
> Affects Versions: 0.5.0
> Reporter: Andy LoPresto
> Assignee: Andy LoPresto
> Priority: Major
> Labels: keys, security
>
> Throughout the application, private keys are used for authentication and encryption in a number of scenarios. These uses are handled independently and sometimes inconsistently.
> Identify any outstanding issues with the use and protection of private keys (lack of enforcement of passphrases, etc.) and possibly provide a consumable framework service to handle this task to deduplicate effort/code and provide a consistent experience.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)