[NIFI-4335] Update Listen* components to refer to RestrictedSSLContextService

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.4.0
• Component/s: Core Framework, Extensions
• Labels: jetty security tls
• Assignee: Michael Hogue
• Reporter: Andy LoPresto
• Created: 31/Aug/17 03:21
• Updated: 08/Sep/17 00:35
• Resolved: 08/Sep/17 00:35

Description

m-hogue added a RestrictedSSLContextService in NIFI-2528 due to discussions regarding the baseline TLS protocol versions that are supported as of NiFi 1.2.0. The ListenHTTP processor was updated to require this new interface, but other Listen* processors and services need to be updated as well.

From discussion on PR 1986:

Also, as @joewitt noted earlier, we should change the available interface for other "listener" processors. Here's a preliminary list I put together, but I would like confirmation from another member:

• `HandleHTTPRequest`
• `ListenBeats`
• `DistributedCacheServer`/`DistributedSetCacheServer`/`DistributedMapCacheServer`
• `ListenSMTP`
• `ListenGRPC`
• `ListenLumberjack` (Deprecated)
• `ListenRELP`
• `ListenSyslog`
• `ListenTCP`/`ListenTCPRecord`

Also:

• `AbstractSiteToSiteReportingTask`
• `org.apache.nifi.processors.slack.TestServer`
• `WebSocketService`/`JettyWebSocketService`

Issue Links

• is related to: NIFI-2528 Update ListenHTTP to honor SSLContextService Protocols
• links to: GitHub Pull Request #2131