[ 
https://issues.apache.org/jira/browse/NIFI-12272?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17779634#comment-17779634
 ] 

ASF subversion and git services commented on NIFI-12272:
--------------------------------------------------------

Commit f0593a00344a8a1cd59e3dd46a08ac0fb958df2e in nifi's branch 
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=f0593a0034 ]

NIFI-12272 Added Formatter for Certificate Distinguished Names

- Added standard implementation for formatting Subject and Issuer using RFC 1779
- Replaced direct method references to maintain compatibility with historical 
getSubjectDN and getIssuerDN methods

This closes #7931

Signed-off-by: Chris Sampson <[email protected]>


> Add Standard Certificate Principal Formatting
> ---------------------------------------------
>
>                 Key: NIFI-12272
>                 URL: https://issues.apache.org/jira/browse/NIFI-12272
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework, Extensions
>            Reporter: David Handermann
>            Assignee: David Handermann
>            Priority: Major
>             Fix For: 2.0.0
>
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> The {{X509Certificate.getSubjectDN()}} is denigrated in favor of 
> {{getSubjectX500Principal()}} and recent improvements to the main branch 
> replaced legacy usage.
> The getSubjectDN method returns Distinguished Names formatted according to 
> RFC 1779, which includes separating Relative Distinguished Name elements 
> using spaces. This impacts configuration properties such as Identity Mapping, 
> and also impacts flow designs that evaluate Certificate Subject and Issuer 
> attributes.
> The default behavior of {{X500Principal.getName()}} formats Distinguished 
> Names according to RFC 2253, which does not use space separators. Passing 
> {{X500Principal.RFC1779}} to the {{getName()}} method follows the same 
> formatting approach as {{{}getSubjectDN().getName(){}}}.
> Existing behavior should be maintained to avoid unexpected changes when 
> upgrading NiFi versions, and a new utility should be introduced to provide 
> standardized formatting.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to