Re: ExecuteProcess processor with TLS1.2 error: "failed setting cipher list"

2020-05-24 Thread Andy LoPresto
Thanks Eric. Glad to know what the issue was and this should help people in the future. Always appreciate when people follow up and document a solved problem for the benefit of the community. Andy LoPresto alopre...@apache.org alopresto.apa...@gmail.com He/Him PGP Fingerprint: 70EC B3E5 98A6 5A

Re: ExecuteProcess processor with TLS1.2 error: "failed setting cipher list"

2020-05-24 Thread Eric Chaves
Hi Andy, sorry for not answering before. I Just figured this one out (after a lot of trial and error). This one was tricky. ;) The curl being used was the same one that I ran on bash. The error was related to how I was passing the arguments to curl. In bash I was passing the argument *--ciphers 'D

Re: ExecuteProcess processor with TLS1.2 error: "failed setting cipher list"

2020-05-22 Thread Andy LoPresto
Hi Eric, Can you verify a couple things? 1. The specific curl instance you’re using in the terminal and in NiFi are the same? (i.e. run this command on the terminal and in an ExecuteProcess processor: $ which curl) 2. Run curl -V to see which version of openssl curl is using in both scenarios.

ExecuteProcess processor with TLS1.2 error: "failed setting cipher list"

2020-05-22 Thread Eric Chaves
Hi folks, I have a flow that downloads files from an FTP server over SSL using TLS1.2. To achieve this I use curl command line in an ExecuteProcess processor. This routine has been working ok until recently when we tried it on an upgraded NiFi server. After tracking down the error we noticed th