[NIFI-1209] Add the ability to sign files to PutFile / PutHDFS

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Resolved
• Assignee: Unassigned
• Reporter: Andre F de Miranda
• Created: 21/Nov/15 01:06
• Updated: 10/Mar/23 16:46
• Resolved: 10/Mar/23 16:46

Description

NiFi allows the Dataflows to be signed, however, this causes some complexities in processing data downstream.

Furthemore, frequently, entities are happy to forfeit dataflow encryption for the use of hashing mechanisms + public keys that can "guarantee" (e.g. GPG signatures) the integrity of a resultant file once it has been stored for long term archival (e.g. HDFS).

it would be great to have the ability to sign files being written by PutFile and PutHDFS as they are written to disk.

PS-A added bonus would be to in addition to public key encryption, using Merkle Hash Trees for providing non-repudiation of data flows.

Issue Links

• is related to: NIFI-7322 Add SignContentPGP and VerifyContentPGP Processors