[NIFI-7305] TLS Toolkit should generate client certificate keystore without escaped characters

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 1.11.4
• Component/s: Tools and Build
• Labels: security toolkit ux
• Epic Link: NiFi security configuration requires substantial knowledge and effort to deploy
• Assignee: Unassigned
• Reporter: Andy LoPresto
• Created: 01/Apr/20 00:37
• Updated: 03/Nov/23 20:53
• Resolved: 03/Nov/23 20:53

Description

The TLS Toolkit generates keystores by default which map to the DN provided, which contains characters which must be escaped when interacting with the files on the command-line. The DN should be transformed with a deterministic character mapping to avoid these characters.

Generated filename: CN=alopresto OU=NiFi.p12
To run a command: keytool -list -v -storetype PKCS12 -keystore CN\=alopresto\ OU\=NiFi.p12
Suggested filename: CN_alopresto_OU_NiFi.p12

Issue Links

• is related to: NIFI-12200 Remove nifi-toolkit-tls module