Andy LoPresto created NIFI-5586:
-----------------------------------
Summary: Add capability to generate ECDSA keys to TLS Toolkit
Key: NIFI-5586
URL: https://issues.apache.org/jira/browse/NIFI-5586
Project: Apache NiFi
Issue Type: Improvement
Components: Tools and Build
Affects Versions: 1.7.1
Reporter: Andy LoPresto
The TLS Toolkit should be able to generate ECDSA keys to enable NiFi to support
ECDSA cipher suites.
Currently, ECDSA keys can be manually generated using external tools and loaded
into a keystore and truststore that are compatible with NiFi.
{code}
keytool -genkeypair -alias ec -keyalg EC -keysize 256 -sigalg SHA256withECDSA
-validity 365 -storetype JKS -keystore ec-keystore.jks -storepass
passwordpassword
keytool -export -alias ec -keystore ec-keystore.jks -file ec-public.pem
keytool -import -alias ec -file ec-public.pem -keystore ec-truststore.jks
-storepass passwordpassword
{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
