[NIFI-3331] TLS Toolkit - add the possibility to define a SAN in issued certificates

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.1
• Fix Version/s: 1.2.0
• Component/s: Tools and Build
• Labels: tls-toolkit
• Assignee: Pierre Villard
• Reporter: Pierre Villard
• Created: 11/Jan/17 21:01
• Updated: 16/Feb/17 08:44
• Resolved: 15/Feb/17 07:43

Description

To ease the deployment of a load balancer in front of NiFi, it would be nice to allow users to define a SAN in certificates issued by the CA.

To load balance the access to the UI or even with a ListenHTTP processor, both will cause errors with a "Host mismatch" kind of error because of different fqdn between nodes certificate and LB certificate. This is also discussed here: http://stackoverflow.com/questions/40035356/nifi-load-balancer

Issue Links

• relates to: NIFI-3490 TLS Toolkit - define SAN in standalone mode
• links to: GitHub Pull Request #1491