[NIFI-3265] tls-toolkit client can fail when tls-toolkit server has multiple cn attributes

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Won't Do
• Affects Version/s: 1.1.1, 1.0.1
• Labels: tls-toolkit
• Assignee: Unassigned
• Reporter: Bryan Rosander
• Created: 28/Dec/16 20:33
• Updated: 01/Nov/23 17:28
• Resolved: 01/Nov/23 17:28

Description

Ldap hierarchies can have multiple cn attributes.

tls-toolkit in client mode validates the first CN attribute parsed from the distinguished name against the hostname name of the tls-toolkit server to help avoid man-in-the-middle attacks.

This check can fail when multiple CN attributes are present.

Issue Links

• is related to: NIFI-12200 Remove nifi-toolkit-tls module