[NIFI-9724] Add set-sensitive-properties-algorithm command

• Type: New Feature
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.16.0
• Component/s: Core Framework
• Labels: security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 24/Feb/22 17:12
• Updated: 25/Feb/22 17:02
• Resolved: 25/Feb/22 17:02

Description

Adding a new command in nifi.sh to support updating the sensitive properties algorithm would streamline the upgrade process for deployments that currently use one of the older algorithms.

The set-sensitive-properties-key command available in nifi.sh supports changing the value of nifi.sensitive.props.key and updating the flow configuration. The command reads the current value of nifi.sensitive.props.algorithm and updates the flow configuration using the specified key. The NiFi encrypt-config.sh toolkit command supports changing the nifi.sensitive.props.algorithm in conjunction with updating nifi.sensitive.props.key. Implementing a new command to set the algorithm should follow the same approach as the set-sensitive-properties-key command.

Issue Links

• links to: GitHub Pull Request #5801