[NIFI-11437] Improve EncryptContentPGP Content Type Detection

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.15.0, 1.21.0
• Fix Version/s: 2.0.0-M1, 1.22.0
• Component/s: Extensions, Security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 12/Apr/23 17:34
• Updated: 13/Apr/23 16:28
• Resolved: 13/Apr/23 16:28

Description

The EncryptContentPGP Processor reads the initial bytes of incoming files to determine whether a file is an OpenPGP message. This initial read is necessary to support flows with SignContentPGP creating signed OpenPGP messages prior to encryption.

The current implementation uses an InputStreamCallback with ProcessSession.read() to run content type detection. Instead a separate read callback, the StreamCallback for ProcessSession.write() can be modified to use a buffer with PushbackInputStream. This will avoid reading the initial bytes multiple times.

Issue Links

• links to: GitHub Pull Request #7166