Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-8701

Log Self-Signed Certificate Hash to Enable Certificate Verification

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Trivial
    • Resolution: Fixed
    • None
    • 1.14.0
    • None
    • None

    Description

      Recent work has been done to enable a "Secure by Default" configuration, where HTTPS is configured on port 8443. 

      Verification of the self-signed certificate generated in this configuration could be done by logging the certificate hash when it is generated.  Users may compare this log line to the hash of the certificate presented by the browser, when an HTTPS connection is established.

      Attachments

        1. chrome.certificate.png
          63 kB
          Paul Grey

        Issue Links

          links to

          Web Link GitHub Pull Request #5159

          Activity

            People

              pgrey Paul Grey
              pgrey Paul Grey
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 40m
                  40m