[NIFI-5399] Improve documentation to indicate that wildcard certificates are not recommended for cluster communications

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.8.0, 1.7.1
• Component/s: Documentation & Website
• Labels: certificate cluster documentation security tls
• Assignee: Andy LoPresto
• Reporter: Andy LoPresto
• Created: 10/Jul/18 00:38
• Updated: 17/Jul/18 01:56
• Resolved: 10/Jul/18 18:17

Description

Based on the research from NIFI-5370 and potential changes in NIFI-5398, the Admin Guide should be improved to explain why wildcard certificates without a unique SAN are not recommended for secure cluster configurations.

Issue Links

• links to: GitHub Pull Request #2870