[NIFI-5212] Configure JettyServer with custom TLS protocols and cipher suites

• Type: Sub-task
• Status: Resolved
• Priority: Minor
• Resolution: Won't Fix
• Affects Version/s: 1.6.0
• Component/s: Core Framework
• Labels: jetty security tls
• Assignee: Unassigned
• Reporter: Andy LoPresto
• Created: 17/May/18 18:36
• Updated: 03/Jan/24 02:52
• Resolved: 03/Jan/24 02:52

Description

This piece should read a TLS configuration and configure the JettyServer and underlying SslContextFactory with the provided protocol versions and cipher suites, performing basic validation (to ensure at least one valid cipher suite and protocol, verifying against java.tls.disabledAlgorithms, etc.).

Issue Links

• Is contained by: NIFI-5458 Improve NiFi TLS and certificate management
• is related to: NIFI-5176 NiFi needs to be buildable on Java 11
• is related to: NIFI-6563 Add support for TLSv1.3 when running on Java 11