[GitHub] [nifi] gh-mc edited a comment on pull request #5308: NIFI-9053 Adding support for TLS and basic authentication with Druid

[GitBox <gi...@apache.org>]

gh-mc edited a comment on pull request #5308:
URL: https://github.com/apache/nifi/pull/5308#issuecomment-939739182


   I've added functionality to the custom validate method, which will check username and password are both set. 
   
   The latest release of [Tranquility](https://github.com/druid-io/tranquility) does not support mTLS. It may be possible to introduce this functionality by modifying this line of code in [SSLContextMaker](https://github.com/druid-io/tranquility/blob/master/core/src/main/scala/com/metamx/tranquility/security/SSLContextMaker.scala#L40). Specifically, a [KeyManager](https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/KeyManager.html) will need to be provided as a parameter to the [init](https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLContext.html#init-javax.net.ssl.KeyManager:A-javax.net.ssl.TrustManager:A-java.security.SecureRandom-) method of [SSLContext](https://docs.oracle.com/javase/8/docs/api/javax/net/ssl/SSLContext.html).
   
   In terms of a user authenticating using certificates. I'm not aware of any Druid [extension](https://druid.apache.org/docs/latest/development/extensions.html) providing functionality that is equivalent to the [Identity Mapping Properties](https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#identity-mapping-properties) found in NiFi.
   
   I'd like to see both your suggestions I have not been able to achieve with this PR implemented (mTLS and user identification via x.509 certificate). I will investigate both further and raise PR on each of the affected projects. Hopefully, someone will beat me to it!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@nifi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org