[
https://issues.apache.org/jira/browse/NIFI-8088?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17272451#comment-17272451
]
ASF subversion and git services commented on NIFI-8088:
-------------------------------------------------------
Commit 2cdb0fb6a39dae3453dc36e810039a25e32d913e in nifi's branch
refs/heads/main from exceptionfactory
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=2cdb0fb ]
NIFI-8088 Removed deprecation warning log for PKCS12 trust stores
Signed-off-by: Nathan Gough <[email protected]>
This closes #4727.
> Remove PKCS12 Deprecation Warning in KeyStoreUtils
> --------------------------------------------------
>
> Key: NIFI-8088
> URL: https://issues.apache.org/jira/browse/NIFI-8088
> Project: Apache NiFi
> Issue Type: Improvement
> Affects Versions: 1.12.1
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Minor
> Labels: pkcs12, security
> Time Spent: 50m
> Remaining Estimate: 0h
>
> KeyStoreUtils.getTrustStore() logs a warning message indicating the PKCS12
> trust stores are deprecated in favor of JKS. JEP 229 changed the default key
> store type to PKCS12 starting with Java 9. The Site to Site Client, GetHTTP,
> and PostHTTP Processors use the KeyStoreUtils.getTrustStore() method. The
> method itself checks the trust store type, logs the warning for PKCS12 and
> delegates to KeyStoreUtils.getKeyStore().
> References to KeyStoreUtils.getTrustStore() should be replaced with
> KeyStoreUtils.getKeyStore() and the getTrustStore() method should be removed
> to avoid confusing log warnings in deployments where PKCS12 trust stores are
> used.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
