[NIFI-9897] Refactor GRPC SSL Configuration

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.17.0, 1.16.1
• Component/s: Extensions
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 08/Apr/22 19:42
• Updated: 28/Jul/22 22:48
• Resolved: 14/Apr/22 16:49

Description

The InvokeGRPC and ListenGRPC Processors leverage Netty for socket protocol communication, and Netty requires its own SslContext configuration to support TLS communication.

The current component implementations require nifi-security-utils, which includes a dependency on the Bouncy Castle library. Refactoring the Processors to use the Netty JdkSslContext will enable direct usage of the Java SSLContext available through the NiFi SSLContextService.createContext() method. This approach would provide better encapsulation of SslContext configuration and remove the unnecessary dependency on the Bouncy Castle library in nifi-grpc-nar.

Issue Links

• links to: GitHub Pull Request #5949