Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-5622

Test certificates require SAN values

    XMLWordPrintableJSON

Details

    Description

      During the update of OkHttp from 3.6.0 to 3.11.0 in NIFI-4806, it was discovered that SubjectAlternativeName checking is now required, as described in RFC 6125. The test resource keystore and truststores need to be updates to provide SAN values.

      Attachments

        Issue Links

          blocks

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-4806 Upgrade to Tika/Tika-Parsers 1.19 to resolve TIKA-2535 and CVEs reported against all releases prior to 1.19

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved
          incorporates

          Bug - A problem which impairs or prevents the functions of the product. NIFI-5623 Update all usage of Okhttp to latest library

          • Major - Major loss of function.
          • Resolved
          is a clone of

          Bug - A problem which impairs or prevents the functions of the product. NIFI-1354 InvokeHTTP test certificates have expired

          • Major - Major loss of function.
          • Resolved
          Is contained by

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. NIFI-5458 Improve NiFi TLS and certificate management

          • Major - Major loss of function.
          • Resolved
          is part of

          Bug - A problem which impairs or prevents the functions of the product. NIFI-5623 Update all usage of Okhttp to latest library

          • Major - Major loss of function.
          • Resolved
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-1353 Update version of OkHttp

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-1355 Provide dynamic code-generated certificates for HTTP tests to avoid expiry

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #3018

          Activity

            People

              alopresto Andy LoPresto
              alopresto Andy LoPresto
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: