Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-5174 NiFi Compatibility with Java 11
  3. NIFI-6563

Add support for TLSv1.3 when running on Java 11

Attach filesAttach ScreenshotVotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Implemented
    • 1.9.2
    • 1.14.0
    • Core Framework, Tools and Build
    • None

    Description

      Add full support for TLSv1.3 running on Java 11.

      Some components currently work (S2S over HTTP, for example) with TLSv1.3.

      One issue related to specifying "TLS" for the protocol in an SSLContext is different (implied) behavior between running on Java 8 and 11, since the "newest" version of the TLS protocol available on the JVM will be used.

      More details will be added upon further analysis.

      Attachments

        Issue Links

        depends upon

        Bug - A problem which impairs or prevents the functions of the product. NIFI-7468 Improve internal handling of SSL channels

        • Major - Major loss of function.
        • Resolved
        is related to

        Sub-task - The sub-task of the issue NIFI-5952 RAW Site-to-Site fails with java.nio.channels.IllegalBlockingModeException

        • Blocker - Blocks development and/or testing work, production could not run
        • Resolved

        Bug - A problem which impairs or prevents the functions of the product. NIFI-7804 Dependencies ending up in nifi-standard-services-api

        • Critical - Crashes, loss of data, severe memory leak.
        • Resolved

        Improvement - An improvement or enhancement to an existing feature or task. NIFI-8037 Support TLS 1.3 in SSLContextService on Java 8

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Resolved
        relates to

        Sub-task - The sub-task of the issue NIFI-5212 Configure JettyServer with custom TLS protocols and cipher suites

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Resolved

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            exceptionfactory David Handermann
            jtstorck Jeff Storck
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment