[MINIFICPP-1070] PKCS12 certificate chains are not handled correctly

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.7.0
• Assignee: Unassigned
• Reporter: Andre Araujo
• Created: 22/Oct/19 14:53
• Updated: 07/Jan/20 12:49
• Resolved: 07/Jan/20 12:49

Description

I found a couple of issues with the certificate handling:

• SSLContextService ignores additional certs in the P12 file, which prevents the NiFi server to establish trust of the client certificate when it's signed by an intermediate CA.
• TLSSocket only supports PEM certificates, so using P12 certs fails

Issue Links

• links to: GitHub Pull Request #666