[NIFI-5460] TLS Toolkit should allow custom CAs to be added to generated truststores

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 1.7.1
• Component/s: Extensions, Security, Tools and Build
• Labels: certificate pki security tls tls-toolkit truststore
• Epic Link: NiFi security configuration requires substantial knowledge and effort to deploy
• Assignee: Andy LoPresto
• Reporter: Andy LoPresto
• Created: 25/Jul/18 22:54
• Updated: 03/Nov/23 20:50
• Resolved: 03/Nov/23 20:50

Description

The TLS Toolkit should allow a command-line flag to accept custom signing authorities so that a generated truststore can contain multiple trusted certificates rather than requiring manual joining of separate truststores.

Issue Links

• is duplicated by: NIFI-6012 NiFi toolkit, tls-toolkit.sh server, doesnt support 3rd party Certificate of Authoprity
• is related to: NIFI-12200 Remove nifi-toolkit-tls module