[NIFI-9897] Refactor GRPC SSL Configuration - ASF JIRA

Agile Board

Attach files

Attach Screenshot

Voters

Watch issue

Watchers

Create sub-task

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Minor
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 1.17.0, 1.16.1
Component/s: Extensions
Labels:
None

Description

The InvokeGRPC and ListenGRPC Processors leverage Netty for socket protocol communication, and Netty requires its own SslContext configuration to support TLS communication.

The current component implementations require nifi-security-utils, which includes a dependency on the Bouncy Castle library. Refactoring the Processors to use the Netty JdkSslContext will enable direct usage of the Java SSLContext available through the NiFi SSLContextService.createContext() method. This approach would provide better encapsulation of SslContext configuration and remove the unnecessary dependency on the Bouncy Castle library in nifi-grpc-nar.