[
https://issues.apache.org/jira/browse/NIFI-8251?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann updated NIFI-8251:
---
Description:
The purpose of this issue is to create new Processors and Controller Services
to perform encrypt and decrypt functions according to the OpenPGP specification
defined in [RFC 4880|https://tools.ietf.org/html/rfc4880]. This functionality
is implemented in the `EncryptContent` Processor, but the current approach is
difficult to configure and troubleshoot in some cases.
The new Controller Services should encapsulate management of keys and keyrings
to improve performance and provide better error handling. New Controller
Services would also support building additional Processors for signing and
verifying PGP messages as requested in NIFI-7322. Separating encrypt and
decrypt content functions into distinct Processors will provide a clearer
distinction between the properties necessary for configuration.
The implementation of these Processors and Controller Services should address
the issues described in the following issues:
- NIFI-7396 Add encryption metadata attributes
- NIFI-6708 Support DSA and ElGamal keys
- NIFI-5346 Specify PGP key as property
- NIFI-5335 Support multiple keys in a PGP keyring
- NIFI-2983 Support decryption of signed messages
- NIFI-1694 Support keyring or individual key for encryption or decryption
was:
The purpose of this issue is to create new Processors and Controller Services
to perform encrypt and decrypt functions according to the OpenPGP specification
defined in [RFC 4880|https://tools.ietf.org/html/rfc4880]. This functionality
is implemented in the `EncryptContent` Processor, but the current approach is
difficult to configure and troubleshoot in some cases.
The new Controller Services should encapsulate management of keys and keyrings
to improve performance and provide better error handling. New Controller
Services would also support building additional Processors for signing and
verifying PGP messages as requested in NIFI-7322. Separating encrypt and
decrypt content functions into distinct Processors will provide a clearer
distinction between the properties necessary for configuration.
The implementation of these Processors and Controller Services should address
the issues described in the following issues:
- NIFI-7396 Add encryption metadata attributes
- NIFI-6708 Support DSA and ElGamal keys
- NIFI-5346 Specify PGP key as property
- NIFI-5335 Support multiple keys in a PGP keyring
- NIFI-2983 Support decryption of signed messages
- NIFI-1964 Support keyring or individual key for encryption or decryption
> Add Encrypt and Decrypt PGP Processors and Services
> ---
>
> Key: NIFI-8251
> URL: https://issues.apache.org/jira/browse/NIFI-8251
> Project: Apache NiFi
> Issue Type: New Feature
> Components: Extensions
>Affects Versions: 1.13.0
>Reporter: David Handermann
>Assignee: David Handermann
>Priority: Major
> Labels: encryption, gpg, pgp, security
>
> The purpose of this issue is to create new Processors and Controller Services
> to perform encrypt and decrypt functions according to the OpenPGP
> specification defined in [RFC 4880|https://tools.ietf.org/html/rfc4880]. This
> functionality is implemented in the `EncryptContent` Processor, but the
> current approach is difficult to configure and troubleshoot in some cases.
> The new Controller Services should encapsulate management of keys and
> keyrings to improve performance and provide better error handling. New
> Controller Services would also support building additional Processors for
> signing and verifying PGP messages as requested in NIFI-7322. Separating
> encrypt and decrypt content functions into distinct Processors will provide a
> clearer distinction between the properties necessary for configuration.
> The implementation of these Processors and Controller Services should address
> the issues described in the following issues:
> - NIFI-7396 Add encryption metadata attributes
> - NIFI-6708 Support DSA and ElGamal keys
> - NIFI-5346 Specify PGP key as property
> - NIFI-5335 Support multiple keys in a PGP keyring
> - NIFI-2983 Support decryption of signed messages
> - NIFI-1694 Support keyring or individual key for encryption or decryption
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
