[NIFI-4187] If NiFi process is killed, bootstrap auto-restart hangs on missing sensitive key file

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.4.0
• Component/s: Core Framework
• Labels: bootstrap encryption
• Assignee: Andy LoPresto
• Reporter: Andy LoPresto
• Created: 14/Jul/17 22:44
• Updated: 30/Oct/19 17:24
• Resolved: 11/Aug/17 11:04

Description

If the NiFi process is killed and autoRestart is enabled in the bootstrap process (RunNiFi.java) (enabled by default except when in run mode) and the instance is using encrypted configuration files, the sensitive.key file which contains the master encryption key is no longer available when restart occurs. This results in the application exiting.

To resolve this, the logic to prepare and generate the sensitive key file should be extracted to a method and invoked during initial start and during the auto-restart loop at https://github.com/apache/nifi/blob/master/nifi-bootstrap/src/main/java/org/apache/nifi/bootstrap/RunNiFi.java#L1159 .

Issue Links

• is related to: NIFI-2656 Allow bootstrap process to prompt for password/key
• relates to: NIFI-4150 NiFi starting failure and key file already existing
• links to: GitHub Pull Request #2073