Hi Alexey, Thanks for referencing the change in the default sensitive properties algorithm. The encryption strategy is different between the two settings, although the previous default value is still supported as an option.
For new installations of NiFi 1.14.0, NIFI_PBKDF2_AES_GCM_256 is preferred, but it is possible to upgrade from 1.13.2 or earlier and continue using the previous default of PBEWITHMD5AND256BITAES-CBC-OPENSSL. Regards, David Handermann On Mon, Jul 19, 2021 at 4:09 PM Lipunov Aleksei <[email protected]> wrote: > Hi, > according to NIFI-8246 defaults are > 1.14.0: > nifi.sensitive.props.algorithm=NIFI_PBKDF2_AES_GCM_256 > 1.13.2 > nifi.sensitive.props.algorithm=PBEWITHMD5AND256BITAES-CBC-OPENSSL > > The same passwords don't work > > My workaround was to export template from an old NiFi and to import it to > a new one. > Hope it helps ) > > Alexey > > ------------------------------ > *From: *"Man on the Moon" <[email protected]> > *To: *[email protected] > *Sent: *Monday, July 19, 2021 4:09:48 PM > *Subject: *Problem upgrading to NiFi 1.14.0 > > Hi all, > > I am in the process of upgrading a NiFi cluster, but I am facing problems > and my ideas are starting to run out. I have gone through the mailing list > archive, but found nothing similar. > > My working NiFi 1.13.2 cluster was already working in secure mode using > HTTPS, and also was configured with the following properties regarding the > sensitive configuration: > > # security properties # > nifi.sensitive.props.key=abcdefgh1234567890 > nifi.sensitive.props.key.protected= > nifi.sensitive.props.algorithm=PBEWITHMD5AND256BITAES-CBC-OPENSSL > nifi.sensitive.props.provider=BC > nifi.sensitive.props.additional.keys= > > and everything was working OK. I have read that one of the new things in > NiFi 1.14 is that it will not allow any more blank values in the > "nifi.sensitive.props.key" property, but this is not my case, so I didn't > worry much about it. After upgrading, when I try to start NiFi 1.14, I get > the following messages: > > 2021-07-19 11:26:14,523 ERROR [main] org.apache.nifi.NiFi Failure to > launch NiFi due to java.lang.IllegalArgumentException: There was an issue > decrypting protected properties > java.lang.IllegalArgumentException: There was an issue decrypting > protected properties > at org.apache.nifi.NiFi.initializeProperties(NiFi.java:346) > at > org.apache.nifi.NiFi.convertArgumentsToValidatedNiFiProperties(NiFi.java:314) > at > org.apache.nifi.NiFi.convertArgumentsToValidatedNiFiProperties(NiFi.java:310) > at org.apache.nifi.NiFi.main(NiFi.java:302) > Caused by: java.lang.VerifyError: Bad return type > Exception Details: > Location: > > org/apache/nifi/properties/ProtectedNiFiProperties.getUnprotectedProperties()Lorg/apache/nifi/properties/ApplicationProperties; > @4: areturn > Reason: > Type 'org/apache/nifi/util/NiFiProperties' (current frame, stack[0]) > is not assignable to 'org/apache/nifi/properties/ApplicationProperties' > (from method signature) > Current Frame: > bci: @4 > flags: { } > locals: { 'org/apache/nifi/properties/ProtectedNiFiProperties' } > stack: { 'org/apache/nifi/util/NiFiProperties' } > Bytecode: > 0x0000000: 2ab6 0036 b0 > > at > org.apache.nifi.properties.NiFiPropertiesLoader.readProtectedPropertiesFromDisk(NiFiPropertiesLoader.java:151) > at > org.apache.nifi.properties.NiFiPropertiesLoader.load(NiFiPropertiesLoader.java:169) > at > org.apache.nifi.properties.NiFiPropertiesLoader.load(NiFiPropertiesLoader.java:191) > at > org.apache.nifi.properties.NiFiPropertiesLoader.loadDefault(NiFiPropertiesLoader.java:114) > at > org.apache.nifi.properties.NiFiPropertiesLoader.getDefaultProperties(NiFiPropertiesLoader.java:216) > at > org.apache.nifi.properties.NiFiPropertiesLoader.get(NiFiPropertiesLoader.java:209) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:498) > at org.apache.nifi.NiFi.initializeProperties(NiFi.java:341) > ... 3 common frames omitted > > > > And NiFi never starts. Is there any additional configuration process I > should do to be able to upgrade from NiFi 1.13 to NiFi 1.14? > > Thanks in advance! > >
