[jira] [Commented] (NIFI-3024) Encrypted configuration migrator should be able to update sensitive properties key and migrate flow.xml.gz

[ASF GitHub Bot (JIRA)]

    [ 
https://issues.apache.org/jira/browse/NIFI-3024?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15688715#comment-15688715
 ] 

ASF GitHub Bot commented on NIFI-3024:
--------------------------------------

Github user alopresto commented on the issue:

    https://github.com/apache/nifi/pull/1261
  
    @YolandaMDavis found test errors when running in JCE **limited** mode, 
which I always forget to check for (seriously, I had a `TODO` in the test). I 
have resolved the issue (known issue documented in 
[NIFI-1465](https://issues.apache.org/jira/browse/NIFI-1465) and 
[NIFI-1255](https://issues.apache.org/jira/browse/NIFI-1255)). 
    
    ```
    
hw12203:/Users/alopresto/Workspace/nifi/nifi-toolkit/nifi-toolkit-encrypt-config
 (NIFI-3024-rebased-squashed) alopresto
    🔒 1680s @ 19:00:43 $ mci
    [INFO] Scanning for projects...
    [INFO] Inspecting build with total of 1 modules...
    [INFO] Installing Nexus Staging features:
    [INFO]   ... total of 1 executions of maven-deploy-plugin replaced with 
nexus-staging-maven-plugin
    [INFO]
    [INFO] 
------------------------------------------------------------------------
    [INFO] Building nifi-toolkit-encrypt-config 1.1.0-SNAPSHOT
    [INFO] 
------------------------------------------------------------------------
    ...
    -------------------------------------------------------
     T E S T S
    -------------------------------------------------------
    Running org.apache.nifi.properties.ConfigEncryptionToolTest
    Tests run: 89, Failures: 0, Errors: 0, Skipped: 6, Time elapsed: 6.637 sec 
- in org.apache.nifi.properties.ConfigEncryptionToolTest
    
    Results :
    
    Tests run: 89, Failures: 0, Errors: 0, Skipped: 6
    
    [INFO]
    ...
    [INFO] 
------------------------------------------------------------------------
    [INFO] BUILD SUCCESS
    [INFO] 
------------------------------------------------------------------------
    [INFO] Total time: 15.805 s
    [INFO] Finished at: 2016-11-22T19:01:01-08:00
    [INFO] Final Memory: 33M/1062M
    [INFO] 
------------------------------------------------------------------------
    
hw12203:/Users/alopresto/Workspace/nifi/nifi-toolkit/nifi-toolkit-encrypt-config
 (NIFI-3024-rebased-squashed) alopresto
    🔒 18s @ 19:01:02 $ jce_unlimited
    Enabling JCE unlimited strength crypto policy
    /Users/alopresto/Desktop/security/unlimited/US_export_policy.jar -> 
/Library/Java/JavaVirtualMachines/jdk1.8.0_101.jdk/Contents/Home/jre/lib/security/./US_export_policy.jar
    /Users/alopresto/Desktop/security/unlimited/local_policy.jar -> 
/Library/Java/JavaVirtualMachines/jdk1.8.0_101.jdk/Contents/Home/jre/lib/security/./local_policy.jar
    
hw12203:/Users/alopresto/Workspace/nifi/nifi-toolkit/nifi-toolkit-encrypt-config
 (NIFI-3024-rebased-squashed) alopresto
    🔓 19s @ 19:01:22 $ mci
    [INFO] Scanning for projects...
    [INFO] Inspecting build with total of 1 modules...
    [INFO] Installing Nexus Staging features:
    [INFO]   ... total of 1 executions of maven-deploy-plugin replaced with 
nexus-staging-maven-plugin
    [INFO]
    [INFO] 
------------------------------------------------------------------------
    [INFO] Building nifi-toolkit-encrypt-config 1.1.0-SNAPSHOT
    [INFO] 
------------------------------------------------------------------------
    [INFO]
    ...
    -------------------------------------------------------
     T E S T S
    -------------------------------------------------------
    Running org.apache.nifi.properties.ConfigEncryptionToolTest
    Tests run: 89, Failures: 0, Errors: 0, Skipped: 6, Time elapsed: 6.668 sec 
- in org.apache.nifi.properties.ConfigEncryptionToolTest
    
    Results :
    
    Tests run: 89, Failures: 0, Errors: 0, Skipped: 6
    
    [INFO]
    ...
    [INFO] 
------------------------------------------------------------------------
    [INFO] BUILD SUCCESS
    [INFO] 
------------------------------------------------------------------------
    [INFO] Total time: 15.041 s
    [INFO] Finished at: 2016-11-22T19:01:43-08:00
    [INFO] Final Memory: 33M/1068M
    [INFO] 
------------------------------------------------------------------------
    
hw12203:/Users/alopresto/Workspace/nifi/nifi-toolkit/nifi-toolkit-encrypt-config
 (NIFI-3024-rebased-squashed) alopresto
    🔓 21s @ 19:01:44 $
    ```


> Encrypted configuration migrator should be able to update sensitive 
> properties key and migrate flow.xml.gz
> ----------------------------------------------------------------------------------------------------------
>
>                 Key: NIFI-3024
>                 URL: https://issues.apache.org/jira/browse/NIFI-3024
>             Project: Apache NiFi
>          Issue Type: Improvement
>          Components: Configuration, Tools and Build
>    Affects Versions: 1.0.0
>            Reporter: Bryan Rosander
>            Assignee: Andy LoPresto
>              Labels: config, encryption, security, serialization
>             Fix For: 1.1.0
>
>
> In order to allow changing of nifi.sensitive.props.key and updating of the 
> flow.xml.gz, the ConfigEncryptionTool should be able to accept a new value 
> for that field and update encrypted values in the flow.xml.gz appropriately.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)