[ https://issues.apache.org/jira/browse/NIFI-5694?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16648112#comment-16648112 ]
Joseph Percivall commented on NIFI-5694: ---------------------------------------- FYI, I originally had another comment in the description[1] but turns out this wasn't a root cause. I've not super well versed on why/how but I have a PKCS12 file which is also valid as a JKS file (verified using openssl + keytool). Something weird with the generation of the trust factory leads it to a state where it successfully created the trust factory when treating the file as JKS but not as PKCS12. This ticket is still an issue though and should be addressed. [1] {noformat} I believe this is the cause of the weirdness I'm seeing where I have the SSL context "successfully" configured with a truststore of type "JKS" and am able to use it with an InovokeHttp processor. The problem is that the truststore is actually P12 (verified on the command line). I believe the issue came about because I wasn't sure if the type/password was correct and was enabling+disabling+reconfiguring it in rapid succession. {noformat} > StandardSSLContextService references configContext in a non-thread safe manner > ------------------------------------------------------------------------------ > > Key: NIFI-5694 > URL: https://issues.apache.org/jira/browse/NIFI-5694 > Project: Apache NiFi > Issue Type: Bug > Affects Versions: 1.7.1 > Reporter: Joseph Percivall > Priority: Major > > configContext is a variable which is accessed from many different threads > (validate, enable, and any processor which calls "createSSLContext"). It is > not declared with any thread safe modifier[1]. Potentially leading to odd > behavior. > > The other shared variables should be marked with a thread-safe modifier as > well. > [1] > [https://github.com/apache/nifi/blob/master/nifi-nar-bundles/nifi-standard-services/nifi-ssl-context-bundle/nifi-ssl-context-service/src/main/java/org/apache/nifi/ssl/StandardSSLContextService.java#L121] -- This message was sent by Atlassian JIRA (v7.6.3#76005)