[NIFI-3024] Encrypted configuration migrator should be able to update sensitive properties key and migrate flow.xml.gz

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0
• Fix Version/s: 1.1.0
• Component/s: Configuration, Tools and Build
• Labels: config encryption security serialization
• Assignee: Andy LoPresto
• Reporter: Bryan Rosander
• Created: 10/Nov/16 20:29
• Updated: 29/Nov/16 04:08
• Resolved: 23/Nov/16 21:32

Description

In order to allow changing of nifi.sensitive.props.key and updating of the flow.xml.gz, the ConfigEncryptionTool should be able to accept a new value for that field and update encrypted values in the flow.xml.gz appropriately.

Issue Links

• is related to: NIFI-3098 Investigate possible issues with cluster flow synchronization when encryption key has been migrated multiple times
• is related to: NIFI-1831 Allow encrypted passwords in configuration files
• relates to: NIFI-1465 Upgrade encryption of sensitive properties
• links to: GitHub Pull Request #1221
• links to: GitHub Pull Request #1261