[
https://issues.apache.org/jira/browse/NIFI-11894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17749759#comment-17749759
]
David Handermann commented on NIFI-11894:
-----------------------------------------
[~arsaljalib] The error indicates that the sensitive properties key or
algorithm do not match the values used for encryption.
The steps outlined in the links provided are specific, but different deployment
environment scenarios can impact the behavior.
If you can provide more details about the runtime environment, whether Docker,
Kubernetes, or directly installed, as well as the step-by-step process
followed, that may help narrow down what is not working.
> Updating Encryption Algorithm failed for Apache Nifi "Decryption Failed with
> Algorithm [AES/GCM/NoPadding]"
> -----------------------------------------------------------------------------------------------------------
>
> Key: NIFI-11894
> URL: https://issues.apache.org/jira/browse/NIFI-11894
> Project: Apache NiFi
> Issue Type: Bug
> Components: Security
> Affects Versions: 1.19.1
> Environment:
> Reporter: Arsal Jalib
> Priority: Minor
>
> After upgrading Nifi, the following warning was logged when starting Nifi:
> WARN [Flow Service Tasks Thread-2] d.o.a.n.s.u.c.NiFiLegacyCipherProvider
> Insecure Cipher Provider Algorithm [PBEWITHMD5AND256BITAES-CBC-OPENSSL]
> generate salt requested
> This did not affect the function of Nifi. Its annoying So I followed the
> following resources, which seemed simple enough:
> [https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#updating-the-sensitive-properties-algorithm]
>
> [https://exceptionfactory.com/posts/2021/07/29/deciphering-apache-nifi-component-property-encryption/#setting-the-sensitive-properties-algorithm]
> However, after trying multiple paths, I always got the following error
> message when restarting Nifi:
> Decryption Failed with Algorithm [AES/GCM/NoPadding] Caused by:
> javax.crypto.AEADBadTagException: mac check in GCM failed
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
