Re: SSL_ERROR_NO_CYPHER_OVERLAP

2018-05-04 Thread Phil H
No worries Andy, I have another issue - I'm sure it's a much simpler one, but it has me stumped. I still get the insufficient permissions error, even after adding myself to the authorizers.xml file as per the admin guide. I added the "EMAILADDRESS=" part of the subject after receiving an unkown

Re: SSL_ERROR_NO_CYPHER_OVERLAP

2018-05-04 Thread Andy LoPresto
Phil, Thanks for documenting the steps you took to get it working. This will definitely be helpful to anyone who has a similar problem in the future. I suspected it was the missing private key and I forgot to explain that yes, to import a PEM-encoded public key and private key into a JKS

Re: SSL_ERROR_NO_CYPHER_OVERLAP

2018-05-04 Thread Phil H
Sorry for talking to myself so much. I have solved the problem! Once I realised that I had never supplied the private key to keytool when I imported the certificate, I started googling along those lines. I found this link from 2008 which provided the solution

Re: SSL_ERROR_NO_CYPHER_OVERLAP

2018-05-04 Thread Phil H
Further info In the httpd installation, I need the private key for the certificate and it's paraphrase. That private key has not played a part of the NiFi install thus far (seems like an important thing - the "keystore" only has a certificate, not a key) The reason why I used PKCS12 for the

Re: SSL_ERROR_NO_CYPHER_OVERLAP

2018-05-04 Thread Phil H
Hi Andy, Sorry - poor use of words (it was late when I wrote the email). When I said "client" certificate I meant the certificate for the NiFi server (no idea why I wrote "client") I'm not trying to use certificate authentication yet - simply to get NiFi operating over TLS. When I test with

Re: SSL_ERROR_NO_CYPHER_OVERLAP

2018-05-04 Thread Andy LoPresto
Hi Phil, Sorry to hear you are having this problem. I have a couple steps you can try to resolve this. First, to clarify the terminology for NiFi, a “client certificate” refers to a public certificate and private key which in combination allow a client to uniquely identify itself and

Re: ReplaceText Flow File Processing Count

2018-05-04 Thread Bryan Bende
I don't know the history of this particular processor, but I think the purpose of the session.get() with batches is similar to the concept of @SupportsBatching. Basically both of them should have better performance because you are handling multiple flow files in a single session. The supports

SSL_ERROR_NO_CYPHER_OVERLAP

2018-05-04 Thread Phil H
Hi all, I am trying to secure my NiFi installation. I have a client certificate (nifi1.crt) and the CA for the intranet (ca.crt). I created the trust and keystores as below: keytool -import -trustcacerts -alias nifi1 -file nifi1.crt -keystore server_keystore.p12 -storetype PKCS12 keytool

ReplaceText Flow File Processing Count

2018-05-04 Thread Peter Wicks (pwicks)
Had a user notice today that a ReplaceText processor, scheduled to run every 20 minutes, had processed all 14 files in queue at once. I looked at the code and see that ReplaceText does not do a standard session.get, but instead calls: final List flowFiles =

Re: GetMongoDB : How to pass parameters as input to GetMongoDB processor

2018-05-04 Thread Sivaprasanna
As Bryan mentioned in the actual ‘GetSplunk’ thread, it is not available but it certainly makes sense to have that feature. If you’re interested in having that, please raise a Jira at https://issues.apache.org/jira - Sivaprasanna On Fri, 4 May 2018 at 12:56 PM, Brajendra Mishra <

RE: GetMongoDB : How to pass parameters as input to GetMongoDB processor

2018-05-04 Thread Brajendra Mishra
Hi Mike, Thanks a lot for your valuable inputs. We tried GetMongoDB Template which you shared in previous mail with new version of Apache NiFi (NiFi-1.6) , Its working fine and we are able to get mongoDB data in desired format. One query: Is such input flow functionality available with