[NIFI-7783] TLS Toolkit should include the CA CN as a SAN

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.12.0
• Fix Version/s: 1.13.0
• Component/s: Tools and Build
• Labels: certificate-authority security subjectAltName tls-toolkit
• Assignee: David Handermann
• Reporter: Andy LoPresto
• Created: 01/Sep/20 23:38
• Updated: 01/Feb/21 21:26
• Resolved: 01/Feb/21 21:15

Description

The NiFi CA (nifi-cert.pem) generated by the TLS Toolkit (in standalone or server mode) does not contain the CN as a SAN entry. This should be explicitly included.

Issue Links

• is part of: NIFI-5458 Improve NiFi TLS and certificate management
• links to: GitHub Pull Request #4709