[NIFI-6254] TLS Toolkit in server mode does not indicate missing JDK JCE Unlimited Strength Support

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Won't Do
• Affects Version/s: 1.9.2
• Component/s: Security, Tools and Build
• Environment: JDK 1.8.112 ; Centos 7
• Assignee: Andy LoPresto
• Reporter: Yolanda M. Davis
• Created: 02/May/19 17:41
• Updated: 03/Nov/23 20:54
• Resolved: 03/Nov/23 20:54

Description

When attempting to run the TLS Toolkit in server mode using a JDK that is not configured with the JCE Unlimited Strength policy files, the toolkit returns an error that does not clearly indicate the issue.

For example when running the following command that uses a Java Home without:

${NIFI_TOOLKIT_DIST}/bin/tls-toolkit.sh server -F -f ${NIFI_TOOLKIT_CA_CONFIG_FILE}

The scripts responds with the following:

"Service server error: null"

To surface this error it was necessary to do remote debugging (to see InvocationException errors were being thrown yet not shown).  The request is to surface this type of error in order for users to take corrective action (in this case ensuring the JCE policy files are added to the Java SDK Home).

 

Issue Links

• is related to: NIFI-12200 Remove nifi-toolkit-tls module