You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2022/10/19 13:52:00 UTC

[jira] [Created] (NIFI-10667) Add Private Key Controller Service

David Handermann created NIFI-10667:
---------------------------------------

             Summary: Add Private Key Controller Service
                 Key: NIFI-10667
                 URL: https://issues.apache.org/jira/browse/NIFI-10667
             Project: Apache NiFi
          Issue Type: New Feature
          Components: Extensions
            Reporter: David Handermann
            Assignee: David Handermann


A new Controller Service enabling abstracted access to Private Keys should be implemented to support Processors and Services that require cryptographic Private Keys.

The service should support returning instances of {{{}java.security.PrivateKey{}}}. The service should be capable of reading encrypted or unencrypted private keys encoded using the [PEM|https://en.wikipedia.org/wiki/Privacy-Enhanced_Mail] format and structured using [PKCS 8|https://en.wikipedia.org/wiki/PKCS_8]. The PEM format represents encoded key material using Base64, so the service should be configurable using either a file path or a sensitive property where the key can be specified as a property value.

With {{java.security.PrivateKey}} being part as the standard JDK, this service interface is suitable for inclusion in the {{{}nifi-standard-services-api-nar{}}}, which will also enable future custom implementations from other sources.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)