Not sure whether this question belongs in the users or developers domain.
Am asking in both hoping to get assistance.

I am trying to use tls-toolkit to create a CA and self-signed certs. I
notice that my CN in my pem file is not what I request on the command line.
How can I successfully force tls-toolkit to set the CN as requested?

I am running NiFi 1.16.3. Toolkit for that same version.

[ec2-user@ip-172-31-73-197 *nifi-toolkit-1.16.3]$ sudo ./bin/tls-toolkit.sh
standalone -n 'ec2-52-4-149-72.compute-1.amazonaws.com
<http://ec2-52-4-149-72.compute-1.amazonaws.com>'*

[main] INFO
org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandaloneCommandLine - No
nifiPropertiesFile specified, using embedded one.
[main] INFO org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandalone -
Running standalone certificate generation with output directory
../nifi-toolkit-1.16.3
[main] INFO org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandalone -
Generated new CA certificate ../nifi-toolkit-1.16.3/nifi-cert.pem and key
../nifi-toolkit-1.16.3/nifi-key.key
[main] INFO org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandalone -
Writing new ssl configuration to ../nifi-toolkit-1.16.3/
ec2-52-4-149-72.compute-1.amazonaws.com
[main] INFO org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandalone -
Successfully generated TLS configuration for
ec2-52-4-149-72.compute-1.amazonaws.com 1 in ../nifi-toolkit-1.16.3/
ec2-52-4-149-72.compute-1.amazonaws.com
[main] INFO org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandalone -
No clientCertDn specified, not generating any client certificates.
[main] INFO org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandalone -
tls-toolkit standalone completed successfully
[ec2-user@ip-172-31-73-197 nifi-toolkit-1.16.3]$ ls -tl
total 84
drwx------ 2 root root    71 Dec 29 22:22
ec2-52-4-149-72.compute-1.amazonaws.com
-rw------- 1 root root  1233 Dec 29 22:22 nifi-cert.pem
-rw------- 1 root root  1675 Dec 29 22:22 nifi-key.key
drwxr-xr-x 2 root root  4096 Jun 13  2022 bin
drwxr-xr-x 3 root root    45 Jun 13  2022 classpath
drwxr-xr-x 2 root root    88 Jun 13  2022 conf
drwxrwx--- 3 root root 16384 Jun 13  2022 lib
-rw-r--r-- 1 root root 41590 Jun 13  2022 LICENSE
-rw-r--r-- 1 root root  7372 Jun 13  2022 NOTICE

[ec2-user@ip-172-31-73-197 nifi-toolkit-1.16.3]$ *sudo keytool -printcert
-file nifi-cert.pem*
Owner: CN=localhost, OU=NIFI
Issuer: CN=localhost, OU=NIFI
.
.
.

Reply via email to