[NIFI-4942] NiFi Toolkit - Allow migration of master key without previous password

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.7.0
• Component/s: Tools and Build
• Assignee: Andy LoPresto
• Reporter: Yolanda M. Davis
• Created: 06/Mar/18 23:28
• Updated: 09/May/18 17:54
• Resolved: 09/May/18 17:54

Description

Currently the encryption cli in nifi toolkit requires that, in order to migrate from one master key to the next, the previous master key or password should be provided. In cases where the provisioning tool doesn't have the previous value available this becomes challenging to provide and may be prone to error. In speaking with alopresto we can allow toolkit to support a mode of execution such that the master key can be updated without requiring the previous password. Also documentation around it's usage should be updated to be clear in describing the purpose and the type of environment where this command should be used (admin only access etc).

Issue Links

• causes: NIFI-5100 Toolkit encrypt-config.sh should expose an option to specify where to store secure_hash.key
• links to: GitHub Pull Request #2628
• links to: GitHub Pull Request #2648
• links to: GitHub Pull Request #2690