David Handermann created NIFI-16549:
---------------------------------------

             Summary: Add Hostname Verification Description to Splunk SSL 
Context Service Property
                 Key: NIFI-16549
                 URL: https://issues.apache.org/jira/browse/NIFI-16549
             Project: Apache NiFi
          Issue Type: Improvement
            Reporter: David Handermann
            Assignee: David Handermann


The Splunk Processors support a custom {{SSL Context Service}} property to 
configure specific Certificate Authorities for TLS connnections. Recent changes 
applied this configuration to all current Splunk Processors, which included a 
custom Trust Manager implementation that limits hostname verification to check 
the configured Hostname against the connected Peer Host. This does not provide 
the same level of protection as standard verification described in RFC 9525 
Section 6, so the property description should be updated.



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)

Reply via email to