[NIFI-7767] SAN not being added to certificates using tls-toolkit

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.12.0
• Fix Version/s: 1.13.0, 1.12.1
• Component/s: Security
• Labels: tls-toolkit
• Assignee: Nathan Gough
• Reporter: Nathan Gough
• Created: 25/Aug/20 18:37
• Updated: 08/Sep/20 16:59
• Resolved: 01/Sep/20 23:37

Description

There appears to be an issue with certificates generated using the tls-toolkit. A few people have reported that the tls-toolkit server/client mode does not include the SAN in the generated certificates. This results in TLS errors when using these certificates in NiFi.

Issue Links

• is part of: NIFI-5458 Improve NiFi TLS and certificate management
• links to: GitHub Pull Request #4503