[NIFI-7134] Enable JettyServer to automatically detect keystore changes and update

• Type: New Feature
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.11.1
• Fix Version/s: 1.14.0
• Component/s: Core Framework, Security
• Labels: jetty keystore restart security tls
• Assignee: Joe Gresock
• Reporter: patrick white
• Created: 11/Feb/20 21:24
• Updated: 29/Apr/21 13:32
• Resolved: 29/Apr/21 13:32

Description

TLS/keystore credential change currently requires a service restart to update, alopresto noted on 'users' that Jetty 9.3+ supports the ability to dynamically update credentials, and provided reference [1].

Request enabling NiFi JettyServer to support detection and reload of its keystore when it changes, such as during credentials update or rotation, will link this request to epic [2].

[1] https://github.com/eclipse/jetty.project/issues/918
[2] https://issues.apache.org/jira/browse/NIFI-5458

Issue Links

• fixes: NIFI-7261 Automatic reload of truststore
• Is contained by: NIFI-5458 Improve NiFi TLS and certificate management
• relates to: NIFI-7261 Automatic reload of truststore
• links to: GitHub Pull Request #4991