Re: Placement and specification of certificates for StandardRestrictedSSLContextService

2022-07-21 Thread David Handermann
Hi Russell, Thanks for the reply and additional details. Reviewing the output of the keytool list command, it appears that the Key Store Type is actually PKCS12, not JKS. What version of Java are you using to create the Key Store? Based on the output indicating PKCS12, I recommend changing the

Re: Placement and specification of certificates for StandardRestrictedSSLContextService

2022-07-21 Thread Russell Bateman
David, Sadly, this is my experience. "changeit" works for me. And I tried reconfiguring the three passwords in /StandardRestrictedSSLContextService/ to no avail. ~/dev/nifi/nifi-1.15.0/conf $ *keytool -list -v -keystore mdmi-keystore.jks* Enter keystore password: *changeit* Keysto

Re: Placement and specification of certificates for StandardRestrictedSSLContextService

2022-07-21 Thread David Handermann
Hi Russell, Thanks for describing the steps used to generate the keystore and truststore files. The validation warnings on StandardRestrictedSSLContextService appear to indicate that the configured password properties do not match the keystore and truststore passwords. It would be helpful to ent

Placement and specification of certificates for StandardRestrictedSSLContextService

2022-07-20 Thread Russell Bateman
I'm trying to set up TLS for a service using /InvokeHTTP/ against an external-to-NiFi Tomcat-based service and I have configured /StandardRestrictedSSLContextService/ thus: https://www.javahotchocolate.com/notes/nifi-images/mdmi-standard-ssl-context-service.png ...which results in the errors s