Thank you very much David and Alexei for your answers, I had kept the same value in the property:
nifi.sensitive.props.algorithm=PBEWITHMD5AND256BITAES-CBC-OPENSSL when upgrading from NiFi 1.13.2 to NiFi 1.14.0. So, luckily enough, that was not an issue (once I have everything running smoothly, I will consider migrating to a more updated algorithm). But what David suggested was exactly what was happening. I had mistakenly copied some jars from the old version into the new lib dir and they were causing the problems. Once I cleaned them, everything started to flow :-P Thank you very much!! El mar, 20 jul 2021 a las 3:43, David Handermann (< [email protected]>) escribió: > Hi Alexey, > > Thanks for referencing the change in the default sensitive properties > algorithm. The encryption strategy is different between the two settings, > although the previous default value is still supported as an option. > > For new installations of NiFi 1.14.0, NIFI_PBKDF2_AES_GCM_256 is > preferred, but it is possible to upgrade from 1.13.2 or earlier and > continue using the previous default of PBEWITHMD5AND256BITAES-CBC-OPENSSL. > > Regards, > David Handermann > > On Mon, Jul 19, 2021 at 4:09 PM Lipunov Aleksei <[email protected]> > wrote: > >> Hi, >> according to NIFI-8246 defaults are >> 1.14.0: >> nifi.sensitive.props.algorithm=NIFI_PBKDF2_AES_GCM_256 >> 1.13.2 >> nifi.sensitive.props.algorithm=PBEWITHMD5AND256BITAES-CBC-OPENSSL >> >> The same passwords don't work >> >> My workaround was to export template from an old NiFi and to import it to >> a new one. >> Hope it helps ) >> >> Alexey >> >> ------------------------------ >> *From: *"Man on the Moon" <[email protected]> >> *To: *[email protected] >> *Sent: *Monday, July 19, 2021 4:09:48 PM >> *Subject: *Problem upgrading to NiFi 1.14.0 >> >> Hi all, >> >> I am in the process of upgrading a NiFi cluster, but I am facing problems >> and my ideas are starting to run out. I have gone through the mailing list >> archive, but found nothing similar. >> >> My working NiFi 1.13.2 cluster was already working in secure mode using >> HTTPS, and also was configured with the following properties regarding the >> sensitive configuration: >> >> # security properties # >> nifi.sensitive.props.key=abcdefgh1234567890 >> nifi.sensitive.props.key.protected= >> nifi.sensitive.props.algorithm=PBEWITHMD5AND256BITAES-CBC-OPENSSL >> nifi.sensitive.props.provider=BC >> nifi.sensitive.props.additional.keys= >> >> and everything was working OK. I have read that one of the new things in >> NiFi 1.14 is that it will not allow any more blank values in the >> "nifi.sensitive.props.key" property, but this is not my case, so I didn't >> worry much about it. After upgrading, when I try to start NiFi 1.14, I get >> the following messages: >> >> 2021-07-19 11:26:14,523 ERROR [main] org.apache.nifi.NiFi Failure to >> launch NiFi due to java.lang.IllegalArgumentException: There was an issue >> decrypting protected properties >> java.lang.IllegalArgumentException: There was an issue decrypting >> protected properties >> at org.apache.nifi.NiFi.initializeProperties(NiFi.java:346) >> at >> org.apache.nifi.NiFi.convertArgumentsToValidatedNiFiProperties(NiFi.java:314) >> at >> org.apache.nifi.NiFi.convertArgumentsToValidatedNiFiProperties(NiFi.java:310) >> at org.apache.nifi.NiFi.main(NiFi.java:302) >> Caused by: java.lang.VerifyError: Bad return type >> Exception Details: >> Location: >> >> org/apache/nifi/properties/ProtectedNiFiProperties.getUnprotectedProperties()Lorg/apache/nifi/properties/ApplicationProperties; >> @4: areturn >> Reason: >> Type 'org/apache/nifi/util/NiFiProperties' (current frame, stack[0]) >> is not assignable to 'org/apache/nifi/properties/ApplicationProperties' >> (from method signature) >> Current Frame: >> bci: @4 >> flags: { } >> locals: { 'org/apache/nifi/properties/ProtectedNiFiProperties' } >> stack: { 'org/apache/nifi/util/NiFiProperties' } >> Bytecode: >> 0x0000000: 2ab6 0036 b0 >> >> at >> org.apache.nifi.properties.NiFiPropertiesLoader.readProtectedPropertiesFromDisk(NiFiPropertiesLoader.java:151) >> at >> org.apache.nifi.properties.NiFiPropertiesLoader.load(NiFiPropertiesLoader.java:169) >> at >> org.apache.nifi.properties.NiFiPropertiesLoader.load(NiFiPropertiesLoader.java:191) >> at >> org.apache.nifi.properties.NiFiPropertiesLoader.loadDefault(NiFiPropertiesLoader.java:114) >> at >> org.apache.nifi.properties.NiFiPropertiesLoader.getDefaultProperties(NiFiPropertiesLoader.java:216) >> at >> org.apache.nifi.properties.NiFiPropertiesLoader.get(NiFiPropertiesLoader.java:209) >> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) >> at >> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) >> at >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >> at java.lang.reflect.Method.invoke(Method.java:498) >> at org.apache.nifi.NiFi.initializeProperties(NiFi.java:341) >> ... 3 common frames omitted >> >> >> >> And NiFi never starts. Is there any additional configuration process I >> should do to be able to upgrade from NiFi 1.13 to NiFi 1.14? >> >> Thanks in advance! >> >>
