Hi Joe, Thanks for providing the stack trace associated with the startup failure. The problem is related to decryption of sensitive property values stored in the flow.xml.gz configuration.
Can you provide the value of the following property from your nifi.properties file? nifi.sensitive.props.algorithm In version 1.13.2, the default value was PBEWITHMD5AND256BITAES-CBC-OPENSSL. In version 1.14.0 the new default value is NIFI_PBKDF2_AES_GCM_256. Based on the error message, the configured value appears to be NIFI_PBKDF2_AES_GCM_256, or one of the other AES_GCM options. However, when upgrading from an existing flow.xml.gz, this property needs to be the exact same value used prior to upgrading. Can you try changing nifi.sensitive.props.algorithm to P BEWITHMD5AND256BITAES-CBC-OPENSSL? Regards, David Handermann On Mon, Jul 19, 2021 at 6:50 PM Joe Obernberger < joseph.obernber...@gmail.com> wrote: > Trying to go from 1.13.2 to 1.14.0, but am getting this error: > > 2021-07-19 19:47:36,953 WARN [main] > org.apache.nifi.web.server.JettyServer Failed to start web server... > shutting down. > org.apache.nifi.encrypt.EncryptionException: Decryption Failed with > Algorithm [AES/GCM/NoPadding] > at > > org.apache.nifi.encrypt.CipherPropertyEncryptor.decrypt(CipherPropertyEncryptor.java:78) > at > > org.apache.nifi.fingerprint.FingerprintFactory.decrypt(FingerprintFactory.java:935) > at > > org.apache.nifi.fingerprint.FingerprintFactory.getLoggableRepresentationOfSensitiveValue(FingerprintFactory.java:550) > at > > org.apache.nifi.fingerprint.FingerprintFactory.access$200(FingerprintFactory.java:71) > at > > org.apache.nifi.fingerprint.FingerprintFactory$6.compare(FingerprintFactory.java:837) > at > > org.apache.nifi.fingerprint.FingerprintFactory$6.compare(FingerprintFactory.java:830) > at java.base/java.util.TimSort.binarySort(TimSort.java:296) > at java.base/java.util.TimSort.sort(TimSort.java:239) > at java.base/java.util.Arrays.sort(Arrays.java:1515) > at java.base/java.util.ArrayList.sort(ArrayList.java:1750) > at java.base/java.util.Collections.sort(Collections.java:179) > at > > org.apache.nifi.fingerprint.FingerprintFactory.sortElements(FingerprintFactory.java:879) > at > > org.apache.nifi.fingerprint.FingerprintFactory.addFlowFileProcessorFingerprint(FingerprintFactory.java:486) > at > > org.apache.nifi.fingerprint.FingerprintFactory.addProcessGroupFingerprint(FingerprintFactory.java:368) > at > > org.apache.nifi.fingerprint.FingerprintFactory.addProcessGroupFingerprint(FingerprintFactory.java:396) > at > > org.apache.nifi.fingerprint.FingerprintFactory.addFlowControllerFingerprint(FingerprintFactory.java:226) > at > > org.apache.nifi.fingerprint.FingerprintFactory.createFingerprint(FingerprintFactory.java:168) > at > > org.apache.nifi.fingerprint.FingerprintFactory.createFingerprint(FingerprintFactory.java:142) > at > > org.apache.nifi.controller.inheritance.FlowFingerprintCheck.checkInheritability(FlowFingerprintCheck.java:45) > at > > org.apache.nifi.controller.StandardFlowSynchronizer.sync(StandardFlowSynchronizer.java:206) > at > > org.apache.nifi.controller.FlowController.synchronize(FlowController.java:1469) > at > > org.apache.nifi.persistence.StandardXMLFlowConfigurationDAO.load(StandardXMLFlowConfigurationDAO.java:89) > at > > org.apache.nifi.controller.StandardFlowService.loadFromBytes(StandardFlowService.java:810) > at > > org.apache.nifi.controller.StandardFlowService.load(StandardFlowService.java:458) > at > org.apache.nifi.web.server.JettyServer.start(JettyServer.java:1206) > at org.apache.nifi.NiFi.<init>(NiFi.java:159) > at org.apache.nifi.NiFi.<init>(NiFi.java:71) > at org.apache.nifi.NiFi.main(NiFi.java:303) > Caused by: javax.crypto.AEADBadTagException: mac check in GCM failed > at > java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native > > Method) > at > > java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) > at > > java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) > at > java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490) > at > org.bouncycastle.jcajce.provider.symmetric.util.BaseBlockCipher$AEADGenericBlockCipher.doFinal(Unknown > > Source) > at > org.bouncycastle.jcajce.provider.symmetric.util.BaseBlockCipher.engineDoFinal(Unknown > > Source) > at java.base/javax.crypto.Cipher.doFinal(Cipher.java:2202) > at > > org.apache.nifi.encrypt.CipherPropertyEncryptor.decrypt(CipherPropertyEncryptor.java:74) > ... 27 common frames omitted > 2021-07-19 19:47:36,953 INFO [Thread-0] org.apache.nifi.NiFi Initiating > shutdown of Jetty web server... > > Any ideas? > > Thank you! > > -Joe > >
