[
https://issues.apache.org/jira/browse/NIFI-16412?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann updated NIFI-16412:
------------------------------------
Status: Patch Available (was: Open)
> Replace Bouncy Castle with Direct DER Encoding for Certificate Builder
> ----------------------------------------------------------------------
>
> Key: NIFI-16412
> URL: https://issues.apache.org/jira/browse/NIFI-16412
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Extensions
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The {{nifi-security-cert-builder}} provides a single {{CertificateBuilder}}
> interface with a standard implementation based on Bouncy Castle.
> The Bouncy Castle library provides a wide variety of capabilities for
> constructing X.509 Certificates, but most of these are unnecessary for the
> self-signed certificates that the application uses.
> The reduce the usage of Bouncy Castle dependencies, the standard
> implementation should be refactored with a purpose-built DER Encoder that
> writes the required Certificate extensions, implements signing, and produces
> the same {{X509Certificate}} object.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
