Re: Certificates in Truststore

2019-07-25 Thread Andy LoPresto
Joseph, Joe provided a number of good links to help provide context around this. I will be working with a couple other committers next week to improve our documentation around this task. Hopefully when we have that complete, you can take a look and let us know if it would have helped you in thi

Re: Certificates in Truststore

2019-07-25 Thread Joe Witt
Joseph I'd make sure to read about the keystore/truststore model and high level bits of PKI. A site like [1] can help with that but the first key is understanding the client cert, server cert, CA, and general trust model. With that basis in mind setting up NiFi for mutual auth with certificates

Re: Certificates in Truststore

2019-07-25 Thread Joe Witt
Joseph You are absolutely right that it would be terrible to have to edit the truststore on the nifi server(s) each time you wanted to add a client cert. You're also right that there is a way to never do this. I'll poke around for some links to help send you in the right direction. Thanks On T

Certificates in Truststore

2019-07-25 Thread Joseph Wheeler
Hello, I apologize if this is a simple/stupid question, but reading through the administration guide and copious amounts of googling have returned very little regarding this. I'm looking into utilizing only client certificates for authentication to our Apache NiFi server. I want to avoid havin