[ 
https://issues.apache.org/jira/browse/NIFI-2193?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15395986#comment-15395986
 ] 

ASF GitHub Bot commented on NIFI-2193:
--------------------------------------

Github user JPercivall commented on a diff in the pull request:

    https://github.com/apache/nifi/pull/695#discussion_r72478817
  
    --- Diff: nifi-toolkit/nifi-toolkit-assembly/NOTICE ---
    @@ -0,0 +1,112 @@
    +Apache NiFi Toolkit
    +Copyright 2014-2016 The Apache Software Foundation
    +
    +This product includes software developed at
    +The Apache Software Foundation (http://www.apache.org/).
    +
    +===========================================
    +Apache Software License v2
    +===========================================
    +
    +The following binary components are provided under the Apache Software 
License v2
    +
    +  (ASLv2) Apache NiFi
    +    The following NOTICE information applies:
    +      Apache NiFi
    +      Copyright 2014-2016 The Apache Software Foundation
    +
    +      This product includes software developed at
    +      The Apache Software Foundation (http://www.apache.org/).
    +
    +      This product includes the following work from the Apache Hadoop 
project:
    +
    +      BoundedByteArrayOutputStream.java adapted to 
SoftLimitBoundedByteArrayOutputStream.java
    +
    +  (ASLv2) Apache Commons CLI
    +    The following NOTICE information applies:
    +      Apache Commons IO
    +      Copyright 2001-2015 The Apache Software Foundation
    +
    +  (ASLv2) Apache Commons Codec
    +    The following NOTICE information applies:
    +      Apache Commons Codec
    +      Copyright 2002-2014 The Apache Software Foundation
    +
    +      src/test/org/apache/commons/codec/language/DoubleMetaphoneTest.java
    +      contains test data from http://aspell.net/test/orig/batch0.tab.
    +      Copyright (C) 2002 Kevin Atkinson ([email protected])
    +
    +      
===============================================================================
    +
    +      The content of package org.apache.commons.codec.language.bm has been 
translated
    +      from the original php source code available at 
http://stevemorse.org/phoneticinfo.htm
    +      with permission from the original authors.
    +      Original source copyright:
    +      Copyright (c) 2008 Alexander Beider & Stephen P. Morse.
    +
    +  (ASLv2) Apache Commons IO
    +    The following NOTICE information applies:
    +      Apache Commons IO
    +      Copyright 2002-2012 The Apache Software Foundation
    +
    +  (ASLv2) Apache Commons Lang
    +    The following NOTICE information applies:
    +      Apache Commons Lang
    +      Copyright 2001-2015 The Apache Software Foundation
    +
    +  (ASLv2) Apache Commons Logging
    --- End diff --
    
    It's my understanding that you don't need to put LICENSE and NOTICE 
information for transitive dependencies (except for deps we created in this 
project like nifi-security-utils). I believe what is needed is to look at the 
deps you have and just see what license they have. For strong licenses, like 
ASLv2 http components uses, you only need to add any NOTICE information that 
the dep lists. You already have the NOTICE information for httpcomponents so 
you don't need to pass any other transitive licensing/notice. 


> Command Line Keystore and Truststore utility
> --------------------------------------------
>
>                 Key: NIFI-2193
>                 URL: https://issues.apache.org/jira/browse/NIFI-2193
>             Project: Apache NiFi
>          Issue Type: New Feature
>            Reporter: Bryan Rosander
>            Assignee: Bryan Rosander
>
> In order to facilitate secure setup of NiFi, it would be useful to have a 
> command line utility capable of generating the required keystores, 
> truststore, and relevant configuration files.
> It should be able to generate keystores for each NiFi node, a truststore that 
> they all use, and relevant passwords and configuration files for using the 
> keystores and truststore.
> Additionally, in order to support distributed deployment, a web based 
> certificate authority with corresponding client will allow for each NiFi 
> instance to generate its own keypair and then request signing by the CA.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to