Peter Gyori created NIFI-9786:
---------------------------------

             Summary: KeyStoreUtils.isStoreValid() suppresses exceptions 
without logging when trying to open a keystore
                 Key: NIFI-9786
                 URL: https://issues.apache.org/jira/browse/NIFI-9786
             Project: Apache NiFi
          Issue Type: Improvement
            Reporter: Peter Gyori


KeyStoreUtils.isStoreValid() simply returns false if the keystore cannot be 
opened e.g. because the password is wrong. There is no log entry about why the 
keystore is not valid.

As a result when SslContextFactory.getTrustManagers() method attempts to read a 
trust store file using the configured properties, if the password is wrong, the 
method is not informed why, and only throws a TlsException stating "The 
truststore properties are not valid".

It would be useful to add debug-level logging to KeyStoreUtils.isStoreValid() 
to log the reason for the keystore being invalid.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to