[NIFI-7322] Add SignContentPGP and VerifyContentPGP Processors

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.15.0
• Component/s: Extensions, Security
• Labels: encryption pgp signing
• Assignee: David Handermann
• Reporter: David Margolis
• Created: 06/Apr/20 15:29
• Updated: 10/Mar/23 16:45
• Resolved: 19/Oct/21 10:49

Description

Users have requested the capability to sign content directly with pgp in addition to storing the signature in an attribute (SignContentAttributePGP). There should be options to clearsign and armor the content. There should be an option to produce the detached signature as it's own flowfile.

Pairing with this processor, users have requested the capability to verify signed content with pgp in addition to verifying the signature in an attribute (VerifyContentAttributePGP). There should be options to verify clearsigned and armored content also.

Finally, the DecryptContentPGP processor should be able to decrypt the signed content, so that just the unsigned content remains.

These processors should use the PGPKeyMaterialService.

Issue Links

• depends upon: NIFI-5346 Allow EncryptContent processor to specify PGP key as processor property
• depends upon: NIFI-8251 Add Encrypt and Decrypt PGP Processors and Services
• relates to: NIFI-1209 Add the ability to sign files to PutFile / PutHDFS
• links to: GitHub Pull Request #5457