[jira] [Commented] (NIFI-6999) Encrypt Config Toolkit fails on very large flow.xml.gz files
[
https://issues.apache.org/jira/browse/NIFI-6999?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17182237#comment-17182237
]
venkatesh kancharla commented on NIFI-6999:
---
we have encountered the exact issue on nifi 1.9 version where flow.xml.gz is
getting overwritten with an empty file.
restarted the nifi from CLI rather than AMBARI
flow.xml.gz file size is 963MB
instance : 120GB memory
NIFI allocated mem: 45GB
toolkit 15GB mem
ERROR:020/08/21 19:01:30 ERROR [main]
org.apache.nifi.toolkit.encryptconfig.EncryptConfigMain:
java.lang.OutOfMemoryError: Requested array size exceeds VM limit
at java.lang.StringCoding.encode(StringCoding.java:350)
at java.lang.String.getBytes(String.java:941)
at org.apache.commons.io.IOUtils.write(IOUtils.java:2025)
at org.apache.commons.io.IOUtils$write$0.call(Unknown Source)
at
org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)
at
org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)
at
org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:141)
at
org.apache.nifi.properties.ConfigEncryptionTool$_writeFlowXmlToFile_closure6$_closure30.doCall(ConfigEncryptionTool.groovy:870)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.codehaus.groovy.reflection.CachedMethod.invoke(CachedMethod.java:93)
at groovy.lang.MetaMethod.doMethodInvoke(MetaMethod.java:325)
at
org.codehaus.groovy.runtime.metaclass.ClosureMetaClass.invokeMethod(ClosureMetaClass.java:294)
at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1022)
at groovy.lang.Closure.call(Closure.java:414)
at groovy.lang.Closure.call(Closure.java:430)
at
org.codehaus.groovy.runtime.IOGroovyMethods.withCloseable(IOGroovyMethods.java:1622)
at
org.codehaus.groovy.runtime.NioGroovyMethods.withCloseable(NioGroovyMethods.java:1759)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at
org.codehaus.groovy.runtime.metaclass.ReflectionMetaMethod.invoke(ReflectionMetaMethod.java:54)
at
org.codehaus.groovy.runtime.metaclass.NewInstanceMetaMethod.invoke(NewInstanceMetaMethod.java:56)
at
org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite$PojoMetaMethodSiteNoUnwrapNoCoerce.invoke(PojoMetaMethodSite.java:274)
at
org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite.call(PojoMetaMethodSite.java:56)
at
org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)
at
org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)
at
org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:125)
at
org.apache.nifi.properties.ConfigEncryptionTool$_writeFlowXmlToFile_closure6.doCall(ConfigEncryptionTool.groovy:869)
Requested array size exceeds VM limit
> Encrypt Config Toolkit fails on very large flow.xml.gz files
>
>
> Key: NIFI-6999
> URL: https://issues.apache.org/jira/browse/NIFI-6999
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Tools and Build
>Affects Versions: 1.2.0, 1.10.0
>Reporter: Andy LoPresto
>Assignee: Andy LoPresto
>Priority: Critical
> Labels: documentation, encryption, heap, security, streaming,
> toolkit
>
> A user reported failure when using the encrypt config toolkit to process
> (encrypt) a large {{flow.xml.gz}}. The compressed file was 49 MB, but was 687
> MB uncompressed. It contained 545 encrypted values, and approximately 90
> templates. This caused the toolkit to fail during {{loadFlowXml()}} unless
> the toolkit invocation set the heap to 8 GB via {{-Xms2g -Xmx8g}}. Even with
> the expanded heap, the serialization of the newly-encrypted flow XML to the
> file system fails with the following exception:
> {code}
> Exception in thread "main" java.lang.OutOfMemoryError: Requested array size
> exceeds VM limit
> at java.lang.StringCoding.encode(StringCoding.java:350)
> at java.lang.String.getBytes(String.java:941)
> at org.apache.commons.io.IOUtils.write(IOUtils.java:1857)
> at org.apache.commons.io.IOUtils$write$0.call(Unknown Source)
> at
> org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)
> at
> org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)
> at
>
[GitHub] [nifi] jfrazee commented on a change in pull request #4482: NIFI-7745: Add SampleRecord processor
jfrazee commented on a change in pull request #4482:
URL: https://github.com/apache/nifi/pull/4482#discussion_r475006113
##
File path:
nifi-nar-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/SampleRecord.java
##
@@ -0,0 +1,403 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.nifi.processors.standard;
+
+import org.apache.nifi.annotation.behavior.EventDriven;
+import org.apache.nifi.annotation.behavior.InputRequirement;
+import org.apache.nifi.annotation.behavior.SideEffectFree;
+import org.apache.nifi.annotation.behavior.SupportsBatching;
+import org.apache.nifi.annotation.documentation.CapabilityDescription;
+import org.apache.nifi.annotation.documentation.Tags;
+import org.apache.nifi.components.AllowableValue;
+import org.apache.nifi.components.PropertyDescriptor;
+import org.apache.nifi.components.PropertyValue;
+import org.apache.nifi.components.ValidationContext;
+import org.apache.nifi.components.ValidationResult;
+import org.apache.nifi.components.Validator;
+import org.apache.nifi.expression.ExpressionLanguageScope;
+import org.apache.nifi.flowfile.FlowFile;
+import org.apache.nifi.flowfile.attributes.CoreAttributes;
+import org.apache.nifi.processor.AbstractProcessor;
+import org.apache.nifi.processor.ProcessContext;
+import org.apache.nifi.processor.ProcessSession;
+import org.apache.nifi.processor.Relationship;
+import org.apache.nifi.processor.exception.ProcessException;
+import org.apache.nifi.processor.util.StandardValidators;
+import org.apache.nifi.serialization.RecordReader;
+import org.apache.nifi.serialization.RecordReaderFactory;
+import org.apache.nifi.serialization.RecordSetWriter;
+import org.apache.nifi.serialization.RecordSetWriterFactory;
+import org.apache.nifi.serialization.WriteResult;
+import org.apache.nifi.serialization.record.Record;
+import org.apache.nifi.serialization.record.RecordSchema;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Collections;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Random;
+import java.util.Set;
+
+@EventDriven
+@SideEffectFree
+@SupportsBatching
+@Tags({"record", "sample"})
+@InputRequirement(InputRequirement.Requirement.INPUT_REQUIRED)
+@CapabilityDescription("Samples the records of a FlowFile based on a specified
sampling strategy (such as Reservoir Sampling). The resulting "
++ "FlowFile may be of a fixed number of records (in the case of
reservoir-based algorithms) or some subset of the total number of records "
++ "(in the case of probabilistic sampling), or a deterministic number
of records (in the case of interval sampling).")
+public class SampleRecord extends AbstractProcessor {
+
+static final String INTERVAL_SAMPLING_KEY = "interval";
+static final String PROBABILISTIC_SAMPLING_KEY = "probabilistic";
+static final String RESERVOIR_SAMPLING_KEY = "reservoir";
+
+static final AllowableValue INTERVAL_SAMPLING = new
AllowableValue(INTERVAL_SAMPLING_KEY, "Interval Sampling",
+"Selects every Nth record where N is the value of the 'Interval
Value' property");
+static final AllowableValue PROBABILISTIC_SAMPLING = new
AllowableValue(PROBABILISTIC_SAMPLING_KEY, "Probabilistic Sampling",
+"Selects each record with probability P where P is the value of
the 'Selection Probability' property");
+static final AllowableValue RESERVOIR_SAMPLING = new
AllowableValue(RESERVOIR_SAMPLING_KEY, "Reservoir Sampling",
+"Creates a sample of K records where each record has equal
probability of being included, where K is "
++ "the value of the 'Reservoir Size' property");
+
+static final PropertyDescriptor RECORD_READER_FACTORY = new
PropertyDescriptor.Builder()
+.name("record-reader")
+.displayName("Record Reader")
+.description("Specifies the Controller Service to use for parsing
incoming data and determining the data's schema")
+
[GitHub] [nifi] jfrazee commented on a change in pull request #4482: NIFI-7745: Add SampleRecord processor
jfrazee commented on a change in pull request #4482:
URL: https://github.com/apache/nifi/pull/4482#discussion_r475005871
##
File path:
nifi-nar-bundles/nifi-standard-bundle/nifi-standard-processors/src/main/java/org/apache/nifi/processors/standard/SampleRecord.java
##
@@ -0,0 +1,403 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.nifi.processors.standard;
+
+import org.apache.nifi.annotation.behavior.EventDriven;
+import org.apache.nifi.annotation.behavior.InputRequirement;
+import org.apache.nifi.annotation.behavior.SideEffectFree;
+import org.apache.nifi.annotation.behavior.SupportsBatching;
+import org.apache.nifi.annotation.documentation.CapabilityDescription;
+import org.apache.nifi.annotation.documentation.Tags;
+import org.apache.nifi.components.AllowableValue;
+import org.apache.nifi.components.PropertyDescriptor;
+import org.apache.nifi.components.PropertyValue;
+import org.apache.nifi.components.ValidationContext;
+import org.apache.nifi.components.ValidationResult;
+import org.apache.nifi.components.Validator;
+import org.apache.nifi.expression.ExpressionLanguageScope;
+import org.apache.nifi.flowfile.FlowFile;
+import org.apache.nifi.flowfile.attributes.CoreAttributes;
+import org.apache.nifi.processor.AbstractProcessor;
+import org.apache.nifi.processor.ProcessContext;
+import org.apache.nifi.processor.ProcessSession;
+import org.apache.nifi.processor.Relationship;
+import org.apache.nifi.processor.exception.ProcessException;
+import org.apache.nifi.processor.util.StandardValidators;
+import org.apache.nifi.serialization.RecordReader;
+import org.apache.nifi.serialization.RecordReaderFactory;
+import org.apache.nifi.serialization.RecordSetWriter;
+import org.apache.nifi.serialization.RecordSetWriterFactory;
+import org.apache.nifi.serialization.WriteResult;
+import org.apache.nifi.serialization.record.Record;
+import org.apache.nifi.serialization.record.RecordSchema;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Collections;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Random;
+import java.util.Set;
+
+@EventDriven
+@SideEffectFree
+@SupportsBatching
+@Tags({"record", "sample"})
+@InputRequirement(InputRequirement.Requirement.INPUT_REQUIRED)
+@CapabilityDescription("Samples the records of a FlowFile based on a specified
sampling strategy (such as Reservoir Sampling). The resulting "
++ "FlowFile may be of a fixed number of records (in the case of
reservoir-based algorithms) or some subset of the total number of records "
++ "(in the case of probabilistic sampling), or a deterministic number
of records (in the case of interval sampling).")
+public class SampleRecord extends AbstractProcessor {
+
+static final String INTERVAL_SAMPLING_KEY = "interval";
+static final String PROBABILISTIC_SAMPLING_KEY = "probabilistic";
+static final String RESERVOIR_SAMPLING_KEY = "reservoir";
+
+static final AllowableValue INTERVAL_SAMPLING = new
AllowableValue(INTERVAL_SAMPLING_KEY, "Interval Sampling",
+"Selects every Nth record where N is the value of the 'Interval
Value' property");
+static final AllowableValue PROBABILISTIC_SAMPLING = new
AllowableValue(PROBABILISTIC_SAMPLING_KEY, "Probabilistic Sampling",
+"Selects each record with probability P where P is the value of
the 'Selection Probability' property");
+static final AllowableValue RESERVOIR_SAMPLING = new
AllowableValue(RESERVOIR_SAMPLING_KEY, "Reservoir Sampling",
+"Creates a sample of K records where each record has equal
probability of being included, where K is "
++ "the value of the 'Reservoir Size' property");
+
+static final PropertyDescriptor RECORD_READER_FACTORY = new
PropertyDescriptor.Builder()
+.name("record-reader")
+.displayName("Record Reader")
+.description("Specifies the Controller Service to use for parsing
incoming data and determining the data's schema")
+
[jira] [Updated] (MINIFICPP-1336) Unable to build minifi 0.7.0 on ARM 64 bit architecture
[
https://issues.apache.org/jira/browse/MINIFICPP-1336?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Advith Nagappa updated MINIFICPP-1336:
--
Description:
{code:java}
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.5 LTS"
{code}
{code:java}
Architecture: aarch64 Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list:
0-3 Thread(s) per core: 1 Core(s) per socket: 4 Socket(s): 1 NUMA node(s): 1
Vendor ID: ARM Model: 3 Model name: Cortex-A72 Stepping: r0p3 BogoMIPS: 166.66
L1d cache: 32K L1i cache: 48K L2 cache: 2048K NUMA node0 CPU(s): 0-3 Flags: fp
asimd evtstrm aes pmull sha1 sha2 crc32 cpuid
{code}
./bootstrap.sh (CMAKE version 3.10.2)
{code:java}
Select MiNiFi C++ Features to toggle.
A. Persistent Repositories .Disabled
B. Lib Curl Features ...Enabled
C. Lib Archive Features Enabled
D. Execute Script support ..Enabled
E. Expression Language support .Enabled
F. Kafka support ...Disabled
G. PCAP support Disabled
H. USB Camera support ..Disabled
I. GPS support .Disabled
J. TensorFlow Support ..Disabled
K. Bustache Support Disabled
L. MQTT Support Disabled
M. SQLite Support ..Disabled
N. Python Support ..Disabled
O. COAP Support Enabled
S. SFTP Support Disabled
V. AWS Support .Disabled
T. OpenCV Support ..Disabled
U. OPC-UA Support...Disabled
Build Options.
1. Disable Tests ...Disabled
2. Enable all extensions
3. Enable JNI Support ..Disabled
4. Use Shared Dependency Links .Enabled
5. Build Profile ...RelWithDebInfo Debug MinSizeRel Release
P. Continue with these options
Q. Quit
* Extension cannot be installed due to
version of cmake or other software
{code}
EDIT: I have attached the output of cmake in "cmake.txt" and output of `make
-j8` in "make_debug.txt"
was:
{code:java}
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.5 LTS"
{code}
{code:java}
Architecture: aarch64 Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list:
0-3 Thread(s) per core: 1 Core(s) per socket: 4 Socket(s): 1 NUMA node(s): 1
Vendor ID: ARM Model: 3 Model name: Cortex-A72 Stepping: r0p3 BogoMIPS: 166.66
L1d cache: 32K L1i cache: 48K L2 cache: 2048K NUMA node0 CPU(s): 0-3 Flags: fp
asimd evtstrm aes pmull sha1 sha2 crc32 cpuid
{code}
{code:java}
Select MiNiFi C++ Features to toggle.
A. Persistent Repositories .Disabled
B. Lib Curl Features ...Enabled
C. Lib Archive Features Enabled
D. Execute Script support ..Enabled
E. Expression Language support .Enabled
F. Kafka support ...Disabled
G. PCAP support Disabled
H. USB Camera support ..Disabled
I. GPS support .Disabled
J. TensorFlow Support ..Disabled
K. Bustache Support Disabled
L. MQTT Support Disabled
M. SQLite Support ..Disabled
N. Python Support ..Disabled
O. COAP Support Enabled
S. SFTP Support Disabled
V. AWS Support .Disabled
T. OpenCV Support ..Disabled
U. OPC-UA Support...Disabled
Build Options.
1. Disable Tests ...Disabled
2. Enable all extensions
3. Enable JNI Support ..Disabled
4. Use Shared Dependency Links .Enabled
5. Build Profile ...RelWithDebInfo Debug MinSizeRel Release
P. Continue with these options
Q. Quit
* Extension cannot be installed due to
version of cmake or other software
{code}
EDIT: I have attached the output of cmake in "cmake.txt" and output of `make
-j8` in "make_debug.txt"
> Unable to build minifi 0.7.0 on ARM 64 bit architecture
> ---
>
> Key: MINIFICPP-1336
> URL: https://issues.apache.org/jira/browse/MINIFICPP-1336
> Project: Apache NiFi MiNiFi C++
> Issue Type: Bug
>Affects Versions: 0.7.0
>Reporter: Advith Nagappa
>Priority: Major
> Attachments: cmake.txt, debug.txt, debug01.txt, make_debug.txt
>
>
> {code:java}
> DISTRIB_ID=Ubuntu
> DISTRIB_RELEASE=18.04
> DISTRIB_CODENAME=bionic
> DISTRIB_DESCRIPTION="Ubuntu 18.04.5 LTS"
> {code}
> {code:java}
> Architecture: aarch64 Byte Order: Little Endian CPU(s): 4 On-line CPU(s)
> list: 0-3 Thread(s) per core: 1 Core(s) per socket: 4 Socket(s): 1
[jira] [Updated] (NIFI-7756) NIFI 1.12.0 doesn't work with wildcard certificates
[
https://issues.apache.org/jira/browse/NIFI-7756?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pierre Villard updated NIFI-7756:
-
Component/s: Security
> NIFI 1.12.0 doesn't work with wildcard certificates
> ---
>
> Key: NIFI-7756
> URL: https://issues.apache.org/jira/browse/NIFI-7756
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework, Security
>Affects Versions: 1.12.0
>Reporter: Heinz Mayer
>Priority: Major
>
> After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore
> The same keystore works with NIFI 1.11.4
> {code:java}
> 2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to
> start web server... shutting down.java.lang.IllegalStateException: KeyStores
> with multiple certificates are not supported on the base class
> org.eclipse.jetty.util.ssl.SslContextFactory. (Use
> org.eclipse.jetty.util.ssl.SslContextFactory$Server or
> org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at
> org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:320)
> at
> org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
> at
> org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.eclipse.jetty.server.Server.doStart(Server.java:385) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1058) at
> org.apache.nifi.NiFi.(NiFi.java:158) at
> org.apache.nifi.NiFi.(NiFi.java:72) at
> org.apache.nifi.NiFi.main(NiFi.java:301) {code}
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Updated] (NIFI-7756) NIFI 1.12.0 doesn't work with wildcard certificates
[
https://issues.apache.org/jira/browse/NIFI-7756?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pierre Villard updated NIFI-7756:
-
Affects Version/s: 1.12.0
> NIFI 1.12.0 doesn't work with wildcard certificates
> ---
>
> Key: NIFI-7756
> URL: https://issues.apache.org/jira/browse/NIFI-7756
> Project: Apache NiFi
> Issue Type: Bug
>Affects Versions: 1.12.0
>Reporter: Heinz Mayer
>Priority: Major
>
> After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore
> The same keystore works with NIFI 1.11.4
> {code:java}
> 2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to
> start web server... shutting down.java.lang.IllegalStateException: KeyStores
> with multiple certificates are not supported on the base class
> org.eclipse.jetty.util.ssl.SslContextFactory. (Use
> org.eclipse.jetty.util.ssl.SslContextFactory$Server or
> org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at
> org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:320)
> at
> org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
> at
> org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.eclipse.jetty.server.Server.doStart(Server.java:385) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1058) at
> org.apache.nifi.NiFi.(NiFi.java:158) at
> org.apache.nifi.NiFi.(NiFi.java:72) at
> org.apache.nifi.NiFi.main(NiFi.java:301) {code}
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Updated] (NIFI-7756) NIFI 1.12.0 doesn't work with wildcard certificates
[
https://issues.apache.org/jira/browse/NIFI-7756?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Pierre Villard updated NIFI-7756:
-
Component/s: Core Framework
> NIFI 1.12.0 doesn't work with wildcard certificates
> ---
>
> Key: NIFI-7756
> URL: https://issues.apache.org/jira/browse/NIFI-7756
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
>Affects Versions: 1.12.0
>Reporter: Heinz Mayer
>Priority: Major
>
> After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore
> The same keystore works with NIFI 1.11.4
> {code:java}
> 2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to
> start web server... shutting down.java.lang.IllegalStateException: KeyStores
> with multiple certificates are not supported on the base class
> org.eclipse.jetty.util.ssl.SslContextFactory. (Use
> org.eclipse.jetty.util.ssl.SslContextFactory$Server or
> org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at
> org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:320)
> at
> org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
> at
> org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.eclipse.jetty.server.Server.doStart(Server.java:385) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1058) at
> org.apache.nifi.NiFi.(NiFi.java:158) at
> org.apache.nifi.NiFi.(NiFi.java:72) at
> org.apache.nifi.NiFi.main(NiFi.java:301) {code}
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Comment Edited] (NIFI-7756) NIFI 1.12.0 doesn't work with wildcard certificates
[
https://issues.apache.org/jira/browse/NIFI-7756?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17181747#comment-17181747
]
Pierre Villard edited comment on NIFI-7756 at 8/21/20, 9:26 AM:
Our documentation is clear about not supporting wildcard certificates:
{quote}Wildcard certificates (i.e. two nodes node1.nifi.apache.org and
node2.nifi.apache.org being assigned the same certificate with a CN or SAN
entry of *.nifi.apache.org) are not officially supported and not recommended.
There are numerous disadvantages to using wildcard certificates, and a cluster
working with wildcard certificates has occurred in previous versions out of
lucky accidents, not intentional support. Wildcard SAN entries are acceptable
if each cert maintains an additional unique SAN entry and CN entry.
{quote}
Otherwise I think this duplicates NIFI-7730
was (Author: pvillard):
Our documentation is clear about not supporting wildcard certificates:
{noformat}
Wildcard certificates (i.e. two nodes node1.nifi.apache.org and
node2.nifi.apache.org being assigned the same certificate with a CN or SAN
entry of *.nifi.apache.org) are not officially supported and not recommended.
There are numerous disadvantages to using wildcard certificates, and a cluster
working with wildcard certificates has occurred in previous versions out of
lucky accidents, not intentional support. Wildcard SAN entries are acceptable
if each cert maintains an additional unique SAN entry and CN entry.
{noformat}
Otherwise I think this duplicates NIFI-7730
> NIFI 1.12.0 doesn't work with wildcard certificates
> ---
>
> Key: NIFI-7756
> URL: https://issues.apache.org/jira/browse/NIFI-7756
> Project: Apache NiFi
> Issue Type: Bug
>Reporter: Heinz Mayer
>Priority: Major
>
> After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore
> The same keystore works with NIFI 1.11.4
> {code:java}
> 2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to
> start web server... shutting down.java.lang.IllegalStateException: KeyStores
> with multiple certificates are not supported on the base class
> org.eclipse.jetty.util.ssl.SslContextFactory. (Use
> org.eclipse.jetty.util.ssl.SslContextFactory$Server or
> org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at
> org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:320)
> at
> org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
> at
> org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.eclipse.jetty.server.Server.doStart(Server.java:385) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1058) at
> org.apache.nifi.NiFi.(NiFi.java:158) at
> org.apache.nifi.NiFi.(NiFi.java:72) at
> org.apache.nifi.NiFi.main(NiFi.java:301) {code}
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Commented] (NIFI-7756) NIFI 1.12.0 doesn't work with wildcard certificates
[
https://issues.apache.org/jira/browse/NIFI-7756?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17181747#comment-17181747
]
Pierre Villard commented on NIFI-7756:
--
Our documentation is clear about not supporting wildcard certificates:
{noformat}
Wildcard certificates (i.e. two nodes node1.nifi.apache.org and
node2.nifi.apache.org being assigned the same certificate with a CN or SAN
entry of *.nifi.apache.org) are not officially supported and not recommended.
There are numerous disadvantages to using wildcard certificates, and a cluster
working with wildcard certificates has occurred in previous versions out of
lucky accidents, not intentional support. Wildcard SAN entries are acceptable
if each cert maintains an additional unique SAN entry and CN entry.
{noformat}
Otherwise I think this duplicates NIFI-7730
> NIFI 1.12.0 doesn't work with wildcard certificates
> ---
>
> Key: NIFI-7756
> URL: https://issues.apache.org/jira/browse/NIFI-7756
> Project: Apache NiFi
> Issue Type: Bug
>Reporter: Heinz Mayer
>Priority: Major
>
> After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore
> The same keystore works with NIFI 1.11.4
> {code:java}
> 2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
> x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
> SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
> 07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to
> start web server... shutting down.java.lang.IllegalStateException: KeyStores
> with multiple certificates are not supported on the base class
> org.eclipse.jetty.util.ssl.SslContextFactory. (Use
> org.eclipse.jetty.util.ssl.SslContextFactory$Server or
> org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at
> org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
> at
> org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
> at
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
> at
> org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:320)
> at
> org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
> at
> org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.eclipse.jetty.server.Server.doStart(Server.java:385) at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
> at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1058) at
> org.apache.nifi.NiFi.(NiFi.java:158) at
> org.apache.nifi.NiFi.(NiFi.java:72) at
> org.apache.nifi.NiFi.main(NiFi.java:301) {code}
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
[jira] [Updated] (MINIFICPP-1336) Unable to build minifi 0.7.0 on ARM 64 bit architecture
[
https://issues.apache.org/jira/browse/MINIFICPP-1336?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Advith Nagappa updated MINIFICPP-1336:
--
Description:
{code:java}
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.5 LTS"
{code}
{code:java}
Architecture: aarch64 Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list:
0-3 Thread(s) per core: 1 Core(s) per socket: 4 Socket(s): 1 NUMA node(s): 1
Vendor ID: ARM Model: 3 Model name: Cortex-A72 Stepping: r0p3 BogoMIPS: 166.66
L1d cache: 32K L1i cache: 48K L2 cache: 2048K NUMA node0 CPU(s): 0-3 Flags: fp
asimd evtstrm aes pmull sha1 sha2 crc32 cpuid
{code}
{code:java}
Select MiNiFi C++ Features to toggle.
A. Persistent Repositories .Disabled
B. Lib Curl Features ...Enabled
C. Lib Archive Features Enabled
D. Execute Script support ..Enabled
E. Expression Language support .Enabled
F. Kafka support ...Disabled
G. PCAP support Disabled
H. USB Camera support ..Disabled
I. GPS support .Disabled
J. TensorFlow Support ..Disabled
K. Bustache Support Disabled
L. MQTT Support Disabled
M. SQLite Support ..Disabled
N. Python Support ..Disabled
O. COAP Support Enabled
S. SFTP Support Disabled
V. AWS Support .Disabled
T. OpenCV Support ..Disabled
U. OPC-UA Support...Disabled
Build Options.
1. Disable Tests ...Disabled
2. Enable all extensions
3. Enable JNI Support ..Disabled
4. Use Shared Dependency Links .Enabled
5. Build Profile ...RelWithDebInfo Debug MinSizeRel Release
P. Continue with these options
Q. Quit
* Extension cannot be installed due to
version of cmake or other software
{code}
EDIT: I have attached the output of cmake in "cmake.txt" and output of `make
-j8` in "make_debug.txt"
was:
{code:java}
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.5 LTS"
{code}
{code:java}
Architecture: aarch64 Byte Order: Little Endian CPU(s): 4 On-line CPU(s) list:
0-3 Thread(s) per core: 1 Core(s) per socket: 4 Socket(s): 1 NUMA node(s): 1
Vendor ID: ARM Model: 3 Model name: Cortex-A72 Stepping: r0p3 BogoMIPS: 166.66
L1d cache: 32K L1i cache: 48K L2 cache: 2048K NUMA node0 CPU(s): 0-3 Flags: fp
asimd evtstrm aes pmull sha1 sha2 crc32 cpuid
{code}
{code:java}
Select MiNiFi C++ Features to toggle.
A. Persistent Repositories .Disabled
B. Lib Curl Features ...Enabled
C. Lib Archive Features Enabled
D. Execute Script support ..Enabled
E. Expression Language support .Enabled
F. Kafka support ...Disabled
G. PCAP support Disabled
H. USB Camera support ..Disabled
I. GPS support .Disabled
J. TensorFlow Support ..Disabled
K. Bustache Support Disabled
L. MQTT Support Disabled
M. SQLite Support ..Disabled
N. Python Support ..Disabled
O. COAP Support Enabled
S. SFTP Support Disabled
V. AWS Support .Disabled
T. OpenCV Support ..Disabled
U. OPC-UA Support...Disabled
Build Options.
1. Disable Tests ...Disabled
2. Enable all extensions
3. Enable JNI Support ..Disabled
4. Use Shared Dependency Links .Enabled
5. Build Profile ...RelWithDebInfo Debug MinSizeRel Release
P. Continue with these options
Q. Quit
* Extension cannot be installed due to
version of cmake or other software
{code}
I have attached the output of `make -j8` in debug.txt
I also disabled tests and ran `make -j8`, the output of which is in debug01.txt
> Unable to build minifi 0.7.0 on ARM 64 bit architecture
> ---
>
> Key: MINIFICPP-1336
> URL: https://issues.apache.org/jira/browse/MINIFICPP-1336
> Project: Apache NiFi MiNiFi C++
> Issue Type: Bug
>Affects Versions: 0.7.0
>Reporter: Advith Nagappa
>Priority: Major
> Attachments: cmake.txt, debug.txt, debug01.txt, make_debug.txt
>
>
> {code:java}
> DISTRIB_ID=Ubuntu
> DISTRIB_RELEASE=18.04
> DISTRIB_CODENAME=bionic
> DISTRIB_DESCRIPTION="Ubuntu 18.04.5 LTS"
> {code}
> {code:java}
> Architecture: aarch64 Byte Order: Little Endian CPU(s): 4 On-line CPU(s)
> list: 0-3 Thread(s) per core: 1 Core(s) per socket: 4 Socket(s): 1 NUMA
>
[jira] [Updated] (NIFI-7756) NIFI 1.12.0 doesn't work with wildcard certificates
[
https://issues.apache.org/jira/browse/NIFI-7756?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Heinz Mayer updated NIFI-7756:
--
Description:
After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore
The same keystore works with NIFI 1.11.4
{code:java}
2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to
start web server... shutting down.java.lang.IllegalStateException: KeyStores
with multiple certificates are not supported on the base class
org.eclipse.jetty.util.ssl.SslContextFactory. (Use
org.eclipse.jetty.util.ssl.SslContextFactory$Server or
org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at
org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275)
at
org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256)
at
org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
at
org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at
org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at
org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:320)
at
org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.eclipse.jetty.server.Server.doStart(Server.java:385) at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1058) at
org.apache.nifi.NiFi.(NiFi.java:158) at
org.apache.nifi.NiFi.(NiFi.java:72) at
org.apache.nifi.NiFi.main(NiFi.java:301) {code}
was:
After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore
The same keystore works with NIFI 1.11.4
2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory
x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for
SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21
07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to
start web server... shutting down.java.lang.IllegalStateException: KeyStores
with multiple certificates are not supported on the base class
org.eclipse.jetty.util.ssl.SslContextFactory. (Use
org.eclipse.jetty.util.ssl.SslContextFactory$Server or
org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at
org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275)
at
org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256)
at
org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374)
at
org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
at
org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
at
[jira] [Created] (NIFI-7756) NIFI 1.12.0 doesn't work with wildcard certificates
Heinz Mayer created NIFI-7756: - Summary: NIFI 1.12.0 doesn't work with wildcard certificates Key: NIFI-7756 URL: https://issues.apache.org/jira/browse/NIFI-7756 Project: Apache NiFi Issue Type: Bug Reporter: Heinz Mayer After Upgrade to NIFI 1.12.0, NIFI doesn't start anymore The same keystore works with NIFI 1.11.4 2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21 07:52:21,462 INFO [main] o.e.jetty.util.ssl.SslContextFactory x509=X509@2559c968(tomcat,h=[mic.co.at],w=[mic.co.at]) for SslContextFactory@37f3a1a0[provider=null,keyStore=file:///opt/nifi/conf/keystore.jks,trustStore=file:///opt/nifi/conf/keystore.jks]2020-08-21 07:52:21,469 WARN [main] org.apache.nifi.web.server.JettyServer Failed to start web server... shutting down.java.lang.IllegalStateException: KeyStores with multiple certificates are not supported on the base class org.eclipse.jetty.util.ssl.SslContextFactory. (Use org.eclipse.jetty.util.ssl.SslContextFactory$Server or org.eclipse.jetty.util.ssl.SslContextFactory$Client instead) at org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1275) at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1256) at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:374) at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245) at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:92) at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169) at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117) at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:320) at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81) at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:231) at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) at org.eclipse.jetty.server.Server.doStart(Server.java:385) at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72) at org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1058) at org.apache.nifi.NiFi.(NiFi.java:158) at org.apache.nifi.NiFi.(NiFi.java:72) at org.apache.nifi.NiFi.main(NiFi.java:301) -- This message was sent by Atlassian Jira (v8.3.4#803005)
