[NIFI-2373] GetHTTP - not working with sites that only support TLS

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.5.1, 0.7.0
• Fix Version/s: 1.1.0, 0.7.1
• Component/s: Core Framework
• Environment: Windows & Debian
• Assignee: Andy LoPresto
• Reporter: Tim
• Created: 23/Jul/16 12:56
• Updated: 07/Oct/16 19:25
• Resolved: 15/Sep/16 22:14

Description

Hi,

I'm using GetHTTP processor to download a file from nvd.nist.gov.

Recently, they have disabled support for SSL and only allow connections to be established through TLS 1.1 or TLS 1.2.

Since this change, the GetHTTP processor fails to download the file and returns a generic "javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake" error.

How to reproduce:

• Create GetHTTP Processor
• Create StandardSSLContextService
• Configure URL & test download:
  https://nvd.nist.gov/feeds/xml/cve/nvdcve-2.0-Modified.xml.gz

What I've tried so far:

• Changing the SSL Protocol attribute of the SSLContextService (to TLS, TLS 1.1 or TLS 1.2, no difference)
• Disabling SSL with the following startup argument: -Dhttps.protocols=TLSv1.2

Issue Links

• is related to: NIFI-2266 GetHTTP and PutHTTP use hard-coded TLS protocol version