Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-7053

Update Toolkit Guide with macOS 10.15 trusted certificate requirements (2048 bit key and max of 825 days of validity)

    XMLWordPrintableJSON

    Details

      Description

      I was testing secured NiFi and NiFi Registry on macOS 10.15.2 using certs generated by the TLS Toolkit.  I was able to access the UIs of both apps using Safari but not able to with Chrome due to a NET::ERR_CERT_REVOKED error which I had never seen before.  Turns out this is a known issue on Catalina (https://support.apple.com/en-us/HT210176). macOSX 10.15 requires certs to be:

      • valid for 825 days or less
      • a minimum 2048 bit key

      By default, the TLS Toolkit sets the number of days the cert should be valid for to 1095 days and the number of bits for generated keys to 2048. Generating new certs with the required 825 validity solved the issue.

      We should document this in the Toolkit Guide for the Mac users in the NiFi community.

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                andrewmlim Andrew M. Lim
                Reporter:
                andrewmlim Andrew M. Lim
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 40m
                  40m