Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-5174 NiFi Compatibility with Java 11
  3. NIFI-6563

Add support for TLSv1.3 when running on Java 11

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Implemented
    • 1.9.2
    • 1.14.0
    • Core Framework, Tools and Build
    • None

    Description

      Add full support for TLSv1.3 running on Java 11.

      Some components currently work (S2S over HTTP, for example) with TLSv1.3.

      One issue related to specifying "TLS" for the protocol in an SSLContext is different (implied) behavior between running on Java 8 and 11, since the "newest" version of the TLS protocol available on the JVM will be used.

      More details will be added upon further analysis.

      Attachments

        Issue Links

          depends upon

          Bug - A problem which impairs or prevents the functions of the product. NIFI-7468 Improve internal handling of SSL channels

          • Major - Major loss of function.
          • Resolved
          is related to

          Sub-task - The sub-task of the issue NIFI-5952 RAW Site-to-Site fails with java.nio.channels.IllegalBlockingModeException

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. NIFI-7804 Dependencies ending up in nifi-standard-services-api

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-8037 Support TLS 1.3 in SSLContextService on Java 8

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          relates to

          Sub-task - The sub-task of the issue NIFI-5212 Configure JettyServer with custom TLS protocols and cipher suites

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              exceptionfactory David Handermann
              jtstorck Jeff Storck
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: