[ 
https://issues.apache.org/jira/browse/NIFI-5210?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16523967#comment-16523967
 ] 

Nathan Gough commented on NIFI-5210:
------------------------------------

Would the idea behind having a custom truststore be to separate the NiFi trust 
from the auto-secure trust? Ie. NiFi won't accept connections with the 
auto-secure remote server (but the auto-secure will)? The only issue here I see 
would be a small added complexity for administration. It should also be named 
obviously (autosecure-truststore).

> Create service to retrieve TLS configurations from remote endpoint
> ------------------------------------------------------------------
>
>                 Key: NIFI-5210
>                 URL: https://issues.apache.org/jira/browse/NIFI-5210
>             Project: Apache NiFi
>          Issue Type: Sub-task
>          Components: Extensions
>    Affects Versions: 1.6.0
>            Reporter: Andy LoPresto
>            Priority: Minor
>              Labels: security, tls
>
> One component of this system will be to retrieve the configurations from a 
> remote service (if the admin opts in). This piece should:
> * communicate over HTTPS only
> ** have a custom truststore?
> * have a configurable URL
> ** have a secondary URL?
> * have a configurable polling interval



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to