David Handermann created NIFI-16412:
---------------------------------------
Summary: Replace Bouncy Castle with Direct DER Encoding for
Certificate Builder
Key: NIFI-16412
URL: https://issues.apache.org/jira/browse/NIFI-16412
Project: Apache NiFi
Issue Type: Improvement
Components: Core Framework, Extensions
Reporter: David Handermann
Assignee: David Handermann
The {{nifi-security-cert-builder}} provides a single {{CertificateBuilder}}
interface with a standard implementation based on Bouncy Castle.
The Bouncy Castle library provides a wide variety of capabilities for
constructing X.509 Certificates, but most of these are unnecessary for the
self-signed certificates that the application uses.
The reduce the usage of Bouncy Castle dependencies, the standard implementation
should be refactored with a purpose-built DER Encoder that writes the required
Certificate extensions, implements signing, and produces the same
{{X509Certificate}} object.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
