[jira] [Updated] (NIFI-13941) Correct Maximum DNS Name Length for Generated Certificates

["David Handermann (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-13941?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann updated NIFI-13941:
------------------------------------
    Status: Patch Available  (was: Open)

> Correct Maximum DNS Name Length for Generated Certificates
> ----------------------------------------------------------
>
>                 Key: NIFI-13941
>                 URL: https://issues.apache.org/jira/browse/NIFI-13941
>             Project: Apache NiFi
>          Issue Type: Bug
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Major
>             Fix For: 2.0.0
>
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The {{nifi.web.proxy.host}} property provides optional DNS names for NiFi running behind a reverse proxy or gateway, and the automated certificate generation process considers property values when adding DNS Subject Alternative Names.
> Recent updates to remove the optional port element set a maximum length of 64 characters for the entire DNS address, which is the limit for a label, but an not the entire address according to [RFC 1035|https://www.rfc-editor.org/rfc/rfc1035]. The length limitation should be changed to 255 as described in RFC 1035 Section 2.3.4.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)