[
https://issues.apache.org/jira/browse/NIFI-16412?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18121869#comment-18121869
]
ASF subversion and git services commented on NIFI-16412:
--------------------------------------------------------
Commit 9a143afbddc177020ee0c446318c47c2f027f452 in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=9a143afbddc ]
NIFI-16412 Replaced Bouncy Castle with custom Certificate Builder (#11747)
> Replace Bouncy Castle with Direct DER Encoding for Certificate Builder
> ----------------------------------------------------------------------
>
> Key: NIFI-16412
> URL: https://issues.apache.org/jira/browse/NIFI-16412
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Extensions
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The {{nifi-security-cert-builder}} provides a single {{CertificateBuilder}}
> interface with a standard implementation based on Bouncy Castle.
> The Bouncy Castle library provides a wide variety of capabilities for
> constructing X.509 Certificates, but most of these are unnecessary for the
> self-signed certificates that the application uses.
> The reduce the usage of Bouncy Castle dependencies, the standard
> implementation should be refactored with a purpose-built DER Encoder that
> writes the required Certificate extensions, implements signing, and produces
> the same {{X509Certificate}} object.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
