[NIFI-3045] Usage of -k undermines encrypted configuration

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.0.0
• Component/s: Configuration
• Labels: bootstrap configuration encryption security
• Assignee: Unassigned
• Reporter: Anders Breindahl
• Created: 16/Nov/16 14:55
• Updated: 25/Apr/17 07:34
• Resolved: 17/Nov/16 01:37

Description

Hey,

When setting up a hardened NiFi installation I ran into this. I hope I'm mistaken.

When running the encrypt-config.sh script, one has a nifi.bootstrap.sensitive.key string configured in bootstrap.conf. The service startup script makes this be passed from RunNifi to{{NiFi}} by a -k parameter.

This however can be retrieved by any user of the interface – which, combined with NiFi being able to read from (the encrypted-under-nifi.bootstrap.sensitive.key) nifi.properties file means that e.g. the nifi.security.keystorePasswd property can be decrypted offline.

Does this have anything to it?

Issue Links

• duplicates: NIFI-2656 Allow bootstrap process to prompt for password/key
• is related to: NIFI-2656 Allow bootstrap process to prompt for password/key