[
https://issues.apache.org/jira/browse/NIFI-6617?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16921664#comment-16921664
]
Andy LoPresto commented on NIFI-6617:
-------------------------------------
* Brainstorm robust protection of key material configuration
** Keep key ID & material on single line/property
** Allow for external key management
** Prevent inline key modification (previously encrypted data will be
unrecoverable)
*** Maybe persist hash of key somewhere to protect over NiFi restarts?
*** Expectation of admin responsibility with write access to
{{nifi.properties}}
*** Document warnings seriously in UG/AG
> Refactor all repo configs to shared config with override
> --------------------------------------------------------
>
> Key: NIFI-6617
> URL: https://issues.apache.org/jira/browse/NIFI-6617
> Project: Apache NiFi
> Issue Type: Sub-task
> Components: Configuration, Configuration Management, Extensions
> Affects Versions: 1.9.2
> Reporter: Andy LoPresto
> Assignee: Andy LoPresto
> Priority: Critical
> Labels: configuration, encryption, key-management, repository,
> security
>
> The three implementations of the encrypted repositories all use per-repo code
> and varying configurations to protect the data. These configurations should
> be streamlined to allow for a single shared configuration across all repos
> with particular repositories being overridden as necessary.
--
This message was sent by Atlassian Jira
(v8.3.2#803003)
