[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-03-06 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 Reviewed, verified contrib-check and all tests, and ran tool. Merged. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-03-06 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 @pvillard31 I reviewed this again. I like it; my only concern is that if you run with `-SAN` it will still process, it won't show any error and a user might expect it to generate a SAN in the keysto

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-03-05 Thread pvillard31
Github user pvillard31 commented on the issue: https://github.com/apache/nifi/pull/1530 Sorry for the misunderstanding @alopresto, agreed that it could be confusing. Updated the PR as per your comments. Should be good now. --- If your project is set up for it, you can reply to this e

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-03-02 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 @pvillard31 I think I was a little unclear -- I didn't expect both `-SAN` and `--subjectAlternativeNames`, but just the long flag `--subjectAlternativeNames`. Some commands stack their short flags (

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-03-02 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 Thanks @pvillard31 . For the record, I know some people prefer the Java 8 lambdas, and I come from a Ruby/Groovy background where I use closures and chained collection operations for everything, but

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-03-02 Thread pvillard31
Github user pvillard31 commented on the issue: https://github.com/apache/nifi/pull/1530 Hey guys, hopefully I've addressed all your comments, thanks for the review! - changed the option to SAN - refactored code as suggested by @olegz --- If your project is set up for it, you

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-02-27 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 I verified the contrib-check, all tests pass, smoke tests on flows work, and the tool now generates SANs in standalone mode. ``` #5: ObjectId: 2.5.29.17 Criticality=false SubjectAlt

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-02-27 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 That's a good point; not every flag needs a short code. SANs, while useful, are definitely less common than some of the other features of the toolkit. --- If your project is set up for it, you can

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-02-27 Thread brosander
Github user brosander commented on the issue: https://github.com/apache/nifi/pull/1530 I agree that changing flags is likely to cause confusion although since we haven't had a release yet, I would hope it would be minimal impact. Consistency across modes of operation will help reduce

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-02-27 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 In general I would push to keep the flags consistent across client/server and standalone mode. On the other hand, I am hesitant to change a flag that already exists in the wild (although, it was jus

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-02-23 Thread pvillard31
Github user pvillard31 commented on the issue: https://github.com/apache/nifi/pull/1530 Thanks @alopresto, really appreciated. In particular I'd like your opinion regarding the option letter: I used ``N`` because both ``s`` and ``S`` are already used in standalone mode. Should I chang

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-02-22 Thread alopresto
Github user alopresto commented on the issue: https://github.com/apache/nifi/pull/1530 @pvillard31 I have limited connectivity for the next couple days but I am happy to review this as I reviewed your similar changes for client/server mode. --- If your project is set up for it, you

[GitHub] nifi issue #1530: NIFI-3490 added SAN option for TLS toolkit in standalone m...

2017-02-22 Thread pvillard31
Github user pvillard31 commented on the issue: https://github.com/apache/nifi/pull/1530 Test example: ./tls-toolkit.sh standalone -s "nifi.vip.org,localhost,nifi-01" -n nifi-01 $ keytool -list -keystore keystore.jks -v Keystore type: JKS