[NIFI-5473] Add documentation for using intermediate CA with TLS toolkit

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.1
• Fix Version/s: 1.8.0
• Component/s: Documentation & Website, Security, Tools and Build
• Labels: certificate documentation security tls tls-toolkit
• Assignee: Andy LoPresto
• Reporter: Andy LoPresto
• Created: 31/Jul/18 01:36
• Updated: 07/Aug/18 19:07
• Resolved: 03/Aug/18 05:30

Description

With some manual work, the TLS toolkit can be used with a pre-existing certificate and private key that has been signed by an organization's certificate authority (CA) to sign toolkit-generated certificates. The Admin Guide should be improved to cover the necessary steps.

When the separate "Security Guide" / "Toolkit Guide" is created, this content should be migrated there.

Issue Links

• Is contained by: NIFI-5458 Improve NiFi TLS and certificate management
• Is contained by: NIFI-5476 Enable TLS Toolkit (standalone) to sign certificates with external CA certificate
• Is contained by: NIFI-5485 Enable TLS Toolkit (client/server) to sign certificates with external CA certificate
• is related to: NIFI-5476 Enable TLS Toolkit (standalone) to sign certificates with external CA certificate
• is related to: NIFI-5485 Enable TLS Toolkit (client/server) to sign certificates with external CA certificate
• links to: GitHub Pull Request #2927