Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-4687

Allow IP addresses in SANs of tls-toolkit generated certificates

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Minor
    • Resolution: Won't Do
    • None
    • None
    • None
    • None
    • Patch

    Description

      If you run
      tls-toolkit.sh standalone -n nifi.localdomain --subjectAlternativeNames 10.0.0.2
      you get a certificate with the "X509v3 Subject Alternative Name"
      DNS:nifi.localdomain, DNS:10.0.0.2
      This patch will change it to the correct form
      DNS:nifi.localdomain, IP Address:10.0.0.2

      Attachments

        1. TlsHelper-allow-ip-addresses-in-SAN.patch
          4 kB
          Roland Hopferwieser

        Issue Links

          is related to

          Task - A task that needs to be done. NIFI-12200 Remove nifi-toolkit-tls module

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              rhopfer Roland Hopferwieser
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: