Thanks Matt. I think that was a remnant of the hostname verifier implementation being switched from a local (incomplete) implementation to an externally provided one that is RFC 6125 compliant. I will add that to the migration guidance and open a follow-on ticket to NIFI-5399 to further update the documentation in the next release.
Andy LoPresto alopre...@apache.org alopresto.apa...@gmail.com PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69 > On Jul 13, 2018, at 1:30 PM, Matt Gilman <matt.c.gil...@gmail.com> wrote: > > +1 (binding) > > Verified signatures, hashes, build, etc. > > Ran into one minor thing that probably warrants a note in the migration > guide. The certificates that I used in my cluster previously no longer > work. It appears the issue is my fault because the certificates did not > have the hostname properly specified in the subjectAlternativeNames. Once I > issued new certificates with these entries all was good. Since this check > is now more strict, we should probably call this out in case others happen > to be using certificates like I was. > > Thanks for RMing Andy! > > Matt > > On Fri, Jul 13, 2018 at 3:44 PM, Mark Payne <marka...@hotmail.com> wrote: > >> +1 (binding). >> >> Verified checksums and hashes. >> Verified full build with contrib-check. >> Verified that the app starts and provides the basic functionalities. >> Verified that wildcard certificates now work in clustered mode. >> Verified that the recursively referenced Controller Services now behave as >> expected, not throwing StackOverflowException. >> >> Many thanks for handling the RM duties, Andy! >> >> Thanks >> -Mark >> >> >> On Jul 13, 2018, at 2:24 PM, Andy LoPresto <alopre...@apache.org<mailto:a >> lopre...@apache.org>> wrote: >> >> Peter, >> >> Thanks for validating. The tag was pushed to the official repository [1] >> but not mirrored to github yet. For the official release, it will be there. >> >> [1] https://git-wip-us.apache.org/repos/asf?p=nifi.git;a=tag;h= >> 411983dbafaaae8d76a2d7a4ae4b8d1177fae1eb >> >> Andy LoPresto >> alopre...@apache.org<mailto:alopre...@apache.org> >> alopresto.apa...@gmail.com<mailto:alopresto.apa...@gmail.com> >> PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69 >> >> On Jul 13, 2018, at 9:55 AM, James Wing <jvw...@gmail.com<mailto:jvwin >> g...@gmail.com>> wrote: >> >> +1 (binding). Ran through the release helper, checked license, notice, >> readme files, and tested the resulting binary. >> >> Thanks for putting this together, Andy. >> >> On Thu, Jul 12, 2018 at 2:00 PM Andy LoPresto <alopre...@apache.org >> <mailto:alopre...@apache.org>> wrote: >> >> Hello, >> >> I am pleased to be calling this vote for the source release of Apache NiFi >> nifi-1.7.1. >> >> The source zip, including signatures, digests, etc. can be found at: >> https://repository.apache.org/content/repositories/orgapachenifi-1131 >> >> The Git tag is nifi-1.7.1-RC1 >> The Git commit ID is 241e5411a24435ca2c39ab7bea1c5eb9ed195cb3 >> >> https://git-wip-us.apache.org/repos/asf?p=nifi.git;a=commit;h= >> 241e5411a24435ca2c39ab7bea1c5eb9ed195cb3 >> >> Checksums of nifi-1.7.1-source-release.zip: >> SHA1: 92428e219f8792b886a2826119d3f70c98de52fe >> SHA256: e951a0a2c6b7f8e742b8ab126532ab2e02876ba8c1db34b858fb72718a9fa0e6 >> SHA512: >> a37add06c3c4f2ae5294c9f7668e2e837d6b92095d8e349d18cb13a1748c >> 0e052632415e0fda148f55b61f6774bcdd487ee3d8b8125fe4d2345791da1fc7d8d9 >> >> Release artifacts are signed with the following key: >> https://people.apache.org/keys/committer/alopresto.asc >> >> KEYS file available here: >> https://dist.apache.org/repos/dist/release/nifi/KEYS >> >> 13 issues were closed/resolved for this release: >> >> https://issues.apache.org/jira/secure/ReleaseNote.jspa? >> projectId=12316020&version=12343647 >> >> Release note highlights can be found here: >> >> https://cwiki.apache.org/confluence/display/NIFI/ >> Release+Notes#ReleaseNotes-Version1.7.1 >> >> The vote will be open for 96 hours. >> Please download the release candidate and evaluate the necessary items >> including checking hashes, signatures, build >> from source, and test. Then please vote: >> >> [ ] +1 Release this package as nifi-1.7.1 >> [ ] +0 no opinion >> [ ] -1 Do not release this package because… >> >> Andy LoPresto >> alopre...@apache.org >> *alopresto.apa...@gmail.com<mailto:alopresto.apa...@gmail.com> < >> alopresto.apa...@gmail.com<mailto:alopresto.apa...@gmail.com>>* >> PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69 >> >> >>
signature.asc
Description: Message signed with OpenPGP using GPGMail
