[ 
https://issues.apache.org/jira/browse/NIFI-2193?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15396033#comment-15396033
 ] 

ASF GitHub Bot commented on NIFI-2193:
--------------------------------------

Github user brosander commented on a diff in the pull request:

    https://github.com/apache/nifi/pull/695#discussion_r72485517
  
    --- Diff: nifi-assembly/pom.xml ---
    @@ -363,147 +363,6 @@ language governing permissions and limitations under 
the License. -->
             </dependency>
         </dependencies>
     
    -    <properties>
    --- End diff --
    
    @JPercivall rebuilding from top now, I did check and am pretty sure that 
nifi.properties still winds up in nifi-assembly.
    
    If you meant that it's not in the toolkit assembly, that's correct, it is 
built into the ssl toolkit jar.  The ssl toolkit is capable of generating a 
nifi.properties updated with the correct ssl values.  If the user does not 
specify a base file to use, it uses the embedded one.


> Command Line Keystore and Truststore utility
> --------------------------------------------
>
>                 Key: NIFI-2193
>                 URL: https://issues.apache.org/jira/browse/NIFI-2193
>             Project: Apache NiFi
>          Issue Type: New Feature
>            Reporter: Bryan Rosander
>            Assignee: Bryan Rosander
>
> In order to facilitate secure setup of NiFi, it would be useful to have a 
> command line utility capable of generating the required keystores, 
> truststore, and relevant configuration files.
> It should be able to generate keystores for each NiFi node, a truststore that 
> they all use, and relevant passwords and configuration files for using the 
> keystores and truststore.
> Additionally, in order to support distributed deployment, a web based 
> certificate authority with corresponding client will allow for each NiFi 
> instance to generate its own keypair and then request signing by the CA.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to