Matthew Clarke created NIFI-2454:
------------------------------------

             Summary: OpenJDK + NiFi 1.0 causes https access issues via Firefox
                 Key: NIFI-2454
                 URL: https://issues.apache.org/jira/browse/NIFI-2454
             Project: Apache NiFi
          Issue Type: Bug
          Components: Core Framework, Core UI
    Affects Versions: 1.0.0
         Environment: Azure VMs running Redhat 7.0 and OpenJDK 8u101 
MAC Firefox version (47.0.1)
and/or
Openstack VMs running Centos 7 and OpenJDK 8u101
MAC Firefox version (47.0.1) being used to access UI
            Reporter: Matthew Clarke
            Priority: Critical


When running nifi1.0 with OpenJDK versions of Java, access to the UI is blocked 
when using Firefox (version 47.0.1).  Chrome (Version 51.0.2704.103 (64-bit)) 
browser continues to allow access.

After changing from OpenJDK to Oracle JDK 8u101, access is no longer blocked by 
Firefox browser.

https://support.mozilla.org/en-US/kb/secure-connection-failed-error-message
 
The above Mozilla kb covers the exact error we are encountering:

-----------------
Secure connection cannot be established

When a website you visit attempts to secure communication between your computer 
and the website, Firefox cross-checks this attempt to ensure that the 
certificate and the method the website is using are actually secure.

Some websites try using out-dated (no longer secure) TLS mechanisms in an 
attempt to secure your connection. Firefox protects you by preventing 
navigation to such sites if there is a problem in securely establishing a 
connection. When this happens, you will see an error page with the option to 
report the error to Mozilla.
-------------------

Using the same keystores and truststores with nifi 0.6.1 running openJDK on 
these VMs does not result in this Firefox issue.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to