Hi,

I had the same issue changing the password and the cipher.

It worked for me using the NiFi Toolkit and applying the operation onto both 
the flow.json.gz and the flow.xml.gz
The documentation for the encrypt-config command is here:
https://nifi.apache.org/docs/nifi-docs/html/toolkit-guide.html#encrypt_config_tool

At the end I ran it using docker with a command like this:
docker run -v .:/conf apache/nifi-toolkit:1.21.0 encrypt-config -x -f 
/conf/flow.json.gz -n /conf/nifi.properties -o /conf/nifi.properties.new -s 
secret -A NIFI_ARGON2_AES_GCM_256 

Kind regards,
Christian Wahl



> On 13. Dec 2023, at 15:18, Lars Winderling <lars.winderl...@posteo.de> wrote:
> 
> Hi Quentin,
> 
> I second these findings. I'm getting the same error on 1.23.2 using the same 
> ciphers.
>   deb: 11
>   java: 17.0.7 Temurin
> 
> Best,
> Lars
> 
> On 23-12-13 14:58, Quentin HORNEMAN GUTTON wrote:
>> Hello,
>> 
>> I’m facing an issue after upgrading NiFi 1.13.2 to 1.23.2.
>> 
>> I have a warn log with Insecure Cipher Provider Algorithm 
>> [PBEWITHMD5AND256BITAES-CBC-OPENSSL]. I tried to update algorithm with the 
>> set-sensitive-properties-algorithm command to NIFI_PBKDF2_AES_GCM_256 but I 
>> have an error message with « Descryption failed with algorithm » caused by « 
>> pad block corrupted ».
>> 
>> Do you have any informations that could help me ?
>> 
>> Best regards,
>> 
>> Quentin HORNEMAN GUTTON
> 

Reply via email to