[
https://issues.apache.org/jira/browse/NIFI-3834?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16956305#comment-16956305
]
ASF subversion and git services commented on NIFI-3834:
-------------------------------------------------------
Commit d148fb18540b410361a91f22e421867910d2f7c9 in nifi's branch
refs/heads/master from Andy LoPresto
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=d148fb1 ]
NIFI-3834 This closes #3821. Added encrypted content repository implementation.
Added skeleton implementation of EncryptedFileSystemRepository.
Added new impl to META-INF registry.
Added investigation comments to FileSystemRepository.
Implemented RepositoryObject block and stream encryptors.
Added passing unit test for encryption and decryption of multiple content
writes (large buffered file) for AES-CTR encryptor.
Refactored shared logic from AES CTR and G/CM encryptors to abstract parent.
Added working unit test for writing/reading via encrypted file system
repository.
Added stream wrappers.
Added encryptor.
Added working unit test for writing/reading multiple pieces of content via
encrypted file system repository.
Added unit test skeleton for writing/reading multiple pieces of content with
different keys via encrypted file system repository.
Implemented key management skeleton for encrypted content repository.
Multiple content claims can now be encrypted with different keys on the same
resource claim and retrieved.
Implemented validation on setting active key id.
Added content repository encryption properties to NiFiProperties.
Implemented configuration of encryption services from NiFiProperties.
Refactored NiFiPropertiesLoader functionality to CryptoUtils for availability
in other modules.
Added RepositoryEncryptionConfiguration and repo-specific subclasses for data
containers.
Continued refactoring of CryptoUtils and RepositoryEncryptorUtils library
methods.
Exposed some internal state of FileSystemRepository via protected getters so
encrypted implementation could access.
Refactored EncryptedFileSystemRepository to extend rather than duplicate FSR.
Refactored EFSR to use ECROS which now extends extracted
ContentRepositoryOutputStream protected inner class in FSR.
Added unit test to encrypt & decrypt image resource.
Added smaller image resource for easier unit test debugging.
Added importFrom method to resolve issue where GetFile would not encrypt
content persisted to repository.
Added text test resource for tests around exporting claim subsets.
Added exportTo methods to handle decrypting encrypted content.
Performed large unit test refactoring, moving shared logic to helper methods.
Added unit test for merged content claim with header/footer/demarcator.
Added unit test for merging content claims each encrypted with a different key.
Ignored non-deterministically failing firewall DNS test.
Added documentation to User and Admin Guide for Encrypted Content Repository.
Added image.
Added refactored utility method for shared ROEM extraction and validation logic
in AbstractAESEncryptor.
Replaced ad-hoc generation of ciphertext stream and byte[] for testing with
static initialization from pre-generated serialized form for performance.
Cleaned up unused test code.
Cleaned up Javadoc and code comments.
Refactored shared logic.
Fixed checkstyle issue.
Fixed test failure due to error message change.
Added experimental warning to repository implementation classes and User Guide
documentation.
Signed-off-by: Joe Witt <[email protected]>
> Implement encrypted content repository
> --------------------------------------
>
> Key: NIFI-3834
> URL: https://issues.apache.org/jira/browse/NIFI-3834
> Project: Apache NiFi
> Issue Type: Sub-task
> Components: Core Framework
> Affects Versions: 1.2.0
> Reporter: Andy LoPresto
> Assignee: Andy LoPresto
> Priority: Major
> Labels: encryption, repository, security
>
> Implement an encrypted repository for content stored on disk, allowing
> random-access seek and retrieval and confidentiality and integrity controls
> on the data.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
