Andy LoPresto created NIFI-3098:
-----------------------------------
Summary: Investigate possible issues with cluster flow
synchronization when encryption key has been migrated multiple times
Key: NIFI-3098
URL: https://issues.apache.org/jira/browse/NIFI-3098
Project: Apache NiFi
Issue Type: Bug
Components: Core Framework, Tools and Build
Affects Versions: 1.1.0
Reporter: Andy LoPresto
Assignee: Andy LoPresto
[~YolandaMDavis] encountered an issue when running a 3 node cluster and using
the {{encrypt-config.sh}} tool to migrate the {{nifi.sensitive.props.key}} used
to encrypt the {{flow.xml.gz}} contents *more than once*. Running the tool once
was fine and the cluster started up without any issue. Stopping the cluster and
running the tool again generated a {{pad block corrupted}} error, which almost
always indicates that the cipher text is being decrypted by the wrong key.
She can offer more details, including the exact steps to reproduce, but I
wanted to capture this issue (much of it documented on [PR
1261|https://github.com/apache/nifi/pull/1261]) for further investigation.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
