Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-1463

Alert users about potentially unsafe password and algorithm combinations when using PBE

    XMLWordPrintableJSON

Details

    Description

      Users can select a weak PBE algorithm for EncryptContent processor and on a machine without unlimited strength crypto jurisdiction policies installed, the password will be limited to 7 characters. Provide a warning to users about this unsafe situation with instructions to remedy.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. NIFI-1255 Evaluate JCE cryptography with PBE and limited strength cryptography

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-1257 Provide additional KDFs for EncryptContent

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. NIFI-1255 Evaluate JCE cryptography with PBE and limited strength cryptography

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              alopresto Andy LoPresto
              alopresto Andy LoPresto
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 24h
                  24h
                  Remaining:
                  Remaining Estimate - 24h
                  24h
                  Logged:
                  Time Spent - Not Specified
                  Not Specified