Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-9965

Refactor encryption and decryption of sensitive flow properties

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • None
    • None
    • Security
    • None

    Description

      Sensitive flow properties are typically encrypted in flow.xml.gz as `enc{ciphertext}`. Decryption is also not standardized, but used in various components, `StandardFlowComparator` and `FlowFromDOMFactory` to name a few. This issue is an effort to standardize the way these values are encrypted and decrypted. This issue also aims to introduce an encryption format that more clearly identifies the underlying sensitive properties algorithm used.

      Attachments

        Issue Links

          is required by

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. NIFI-9953 The config encryption tool is too complicated to use and can be simplified

          • Major - Major loss of function.
          • Open
          requires

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-10012 Use XML/JSON specific parser for StandardFlowEncryptor

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-10104 Refactor use of PropertyEncryptor

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              emilio.setiadarma Emilio Setiadarma
              emilio.setiadarma Emilio Setiadarma
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated: