There are some videos that show usage of the tls-toolkit on the NiFi Registry 
web page [1].  Check out "Setting Up a Secure Apache NiFI Registry” first and 
then "Setting Up a Secure NiFi to Integrate with a Secure NiFi Registry”.

-Drew

[1] https://nifi.apache.org/registry.html 
<https://nifi.apache.org/registry.html>


> On Dec 11, 2020, at 12:43 PM, Darren Govoni <[email protected]> wrote:
> 
> Yeah. I did put the same cert into the browser. But maybe needs a redo. 
> Usually browser prompts to choose the cert but here it doesnt.
> 
> Sent from my Verizon, Samsung Galaxy smartphone
> Get Outlook for Android <https://aka.ms/ghei36>
> From: Etienne Jouvin <[email protected]>
> Sent: Friday, December 11, 2020 12:40:28 PM
> To: [email protected] <[email protected]>
> Subject: Re: Tls-toolkit.sh?
>  
> Hi.
> 
> You have to generate a certificate for client, to inject in the browser.
> I never did it, always setup accounts with LDAPs.
> 
> But there is a nice guide :
> https://nifi.apache.org/docs/nifi-docs/html/walkthroughs.html#securing-nifi-with-provided-certificates
>  
> <https://nifi.apache.org/docs/nifi-docs/html/walkthroughs.html#securing-nifi-with-provided-certificates>
> 
> Etienne
> 
> 
> 
> Le ven. 11 déc. 2020 à 18:32, Darren Govoni <[email protected] 
> <mailto:[email protected]>> a écrit :
> Hi
> 
> So i used tls-toolkit.sh standalone -n 'localhost' -C 'CN=localhost,OU=NIFI'
> 
> It generated the keystore/truststore and nifi.properties. when i use chrome 
> or firefox both reject the cert and wont load nifi.
> 
> Am i missing something?
> 
> Darren
> From: Andrew Grande <[email protected] <mailto:[email protected]>>
> Sent: Friday, December 11, 2020 12:02:46 PM
> To: [email protected] <mailto:[email protected]> 
> <[email protected] <mailto:[email protected]>>
> Subject: Re: Tls-toolkit.sh?
>  
> NiFi toolkit link here https://nifi.apache.org/download.html 
> <https://nifi.apache.org/download.html>
> 
> Enjoy :)
> 
> On Fri, Dec 11, 2020, 8:59 AM Darren Govoni <[email protected] 
> <mailto:[email protected]>> wrote:
> Hi
> 
> I want to setup a secure local nifi and the online docs refer to this script 
> but i cant find it anywhere.
> 
> Any clues?
> 
> Darren
> 
> Sent from my Verizon, Samsung Galaxy smartphone
> Get Outlook for Android <https://aka.ms/ghei36>

Reply via email to