[ 
https://issues.apache.org/jira/browse/NIFI-2193?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15395891#comment-15395891
 ] 

ASF GitHub Bot commented on NIFI-2193:
--------------------------------------

Github user brosander commented on a diff in the pull request:

    https://github.com/apache/nifi/pull/695#discussion_r72468172
  
    --- Diff: nifi-toolkit/nifi-toolkit-tls/pom.xml ---
    @@ -0,0 +1,115 @@
    +<?xml version="1.0" encoding="UTF-8"?>
    +<!--
    +  Licensed to the Apache Software Foundation (ASF) under one or more
    +  contributor license agreements.  See the NOTICE file distributed with
    +  this work for additional information regarding copyright ownership.
    +  The ASF licenses this file to You under the Apache License, Version 2.0
    +  (the "License"); you may not use this file except in compliance with
    +  the License.  You may obtain a copy of the License at
    +      http://www.apache.org/licenses/LICENSE-2.0
    +  Unless required by applicable law or agreed to in writing, software
    +  distributed under the License is distributed on an "AS IS" BASIS,
    +  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    +  See the License for the specific language governing permissions and
    +  limitations under the License.
    +-->
    +<project xmlns="http://maven.apache.org/POM/4.0.0"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; 
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 
http://maven.apache.org/maven-v4_0_0.xsd";>
    +    <modelVersion>4.0.0</modelVersion>
    +    <parent>
    +        <groupId>org.apache.nifi</groupId>
    +        <artifactId>nifi-toolkit</artifactId>
    +        <version>1.0.0-SNAPSHOT</version>
    +    </parent>
    +    <artifactId>nifi-toolkit-tls</artifactId>
    +    <description>Tooling to make tls configuration easier</description>
    +    <dependencies>
    +        <dependency>
    +            <groupId>org.apache.nifi</groupId>
    +            <artifactId>nifi-properties</artifactId>
    +        </dependency>
    +        <dependency>
    +            <groupId>org.apache.nifi</groupId>
    +            <artifactId>nifi-security-utils</artifactId>
    +        </dependency>
    +        <dependency>
    +            <groupId>org.slf4j</groupId>
    +            <artifactId>slf4j-api</artifactId>
    +        </dependency>
    +        <dependency>
    +            <groupId>org.slf4j</groupId>
    +            <artifactId>slf4j-log4j12</artifactId>
    +            <version>1.7.12</version>
    +        </dependency>
    +        <dependency>
    +            <groupId>org.bouncycastle</groupId>
    +            <artifactId>bcpkix-jdk15on</artifactId>
    +        </dependency>
    +        <dependency>
    +            <groupId>org.bouncycastle</groupId>
    +            <artifactId>bcprov-jdk15on</artifactId>
    +        </dependency>
    +        <dependency>
    +            <groupId>commons-cli</groupId>
    +            <artifactId>commons-cli</artifactId>
    +            <version>1.3.1</version>
    +        </dependency>
    +        <dependency>
    +            <groupId>commons-io</groupId>
    +            <artifactId>commons-io</artifactId>
    +            <version>2.5</version>
    +        </dependency>
    +        <dependency>
    +            <groupId>org.eclipse.jetty</groupId>
    +            <artifactId>jetty-server</artifactId>
    +        </dependency>
    +        <dependency>
    +            <groupId>com.fasterxml.jackson.core</groupId>
    +            <artifactId>jackson-databind</artifactId>
    +        </dependency>
    +        <dependency>
    +            <groupId>org.apache.httpcomponents</groupId>
    +            <artifactId>httpclient</artifactId>
    +            <version>4.5.2</version>
    +        </dependency>
    +    </dependencies>
    +    <build>
    +        <plugins>
    +            <plugin>
    +                <groupId>org.apache.maven.plugins</groupId>
    +                <artifactId>maven-dependency-plugin</artifactId>
    +                <executions>
    +                    <execution>
    +                        <id>unpack</id>
    +                        <phase>process-resources</phase>
    +                        <goals>
    +                            <goal>unpack</goal>
    +                        </goals>
    +                        <configuration>
    +                            <artifactItems>
    +                                <artifactItem>
    +                                    <groupId>org.apache.nifi</groupId>
    +                                    <artifactId>nifi-resources</artifactId>
    +                                    <type>zip</type>
    +                                    <classifier>resources</classifier>
    +                                    <overWrite>true</overWrite>
    +                                    
<outputDirectory>${project.build.directory}/classes</outputDirectory>
    +                                    <includes>**/nifi.properties</includes>
    +                                </artifactItem>
    +                            </artifactItems>
    +                        </configuration>
    +                    </execution>
    +                </executions>
    --- End diff --
    
    @JPercivall It pulls in the nifi.properties from the nifi-resources project 
so that we have a reasonable default template embedded in the jar.


> Command Line Keystore and Truststore utility
> --------------------------------------------
>
>                 Key: NIFI-2193
>                 URL: https://issues.apache.org/jira/browse/NIFI-2193
>             Project: Apache NiFi
>          Issue Type: New Feature
>            Reporter: Bryan Rosander
>            Assignee: Bryan Rosander
>
> In order to facilitate secure setup of NiFi, it would be useful to have a 
> command line utility capable of generating the required keystores, 
> truststore, and relevant configuration files.
> It should be able to generate keystores for each NiFi node, a truststore that 
> they all use, and relevant passwords and configuration files for using the 
> keystores and truststore.
> Additionally, in order to support distributed deployment, a web based 
> certificate authority with corresponding client will allow for each NiFi 
> instance to generate its own keypair and then request signing by the CA.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to