org.apache.nifinifi-ssl-context-service-nar2.3.0org.apache.nifinifi-standard-services-api-nar2.3.02.0.0rel/nifi-2.3.0main1org.apache.nifi.ssl.PEMEncodedSSLContextProviderCONTROLLER_SERVICE SSLContext Provider configurable using PEM Private Key and Certificate files. Supports PKCS1 and PKCS8 encoding for Private Keys as well as X.509 encoding for Certificates. PEMSSLTLSKeyCertificatePKCS1PKCS8X.509ECDSAEd25519RSATLS ProtocolTLS ProtocolTLS protocol version required for negotiating encrypted communications.TLSTLSTLSNegotiate latest TLS protocol version based on platform supported versionsTLSv1.3TLSv1.3Require TLSv1.3 protocol versionTLSv1.2TLSv1.2Require TLSv1.2 protocol versiontruefalsefalseNONEfalsefalsePrivate Key SourcePrivate Key SourceSource of information for loading Private Key and Certificate ChainPROPERTIESUndefinedUNDEFINEDAvoid configuring Private Key and Certificate Chain propertiesPropertiesPROPERTIESLoad Private Key and Certificate Chain from configured propertiesFilesFILESLoad Private Key and Certificate Chain from configured filestruefalsefalseNONEfalsefalsePrivate KeyPrivate KeyPEM Private Key encoded using either PKCS1 or PKCS8. Supported algorithms include ECDSA, Ed25519, and RSAtruetruefalseNONEfalsefalseSINGLETEXTPrivate Key SourcePrivate Key SourcePROPERTIESPrivate Key LocationPrivate Key LocationPEM Private Key file location encoded using either PKCS1 or PKCS8. Supported algorithms include ECDSA, Ed25519, and RSAtruefalsefalseNONEfalsefalseSINGLEFILEPrivate Key SourcePrivate Key SourceFILESCertificate ChainCertificate ChainPEM X.509 Certificate Chain associated with Private Key starting with standard BEGIN CERTIFICATE headertruefalsefalseNONEfalsefalseSINGLETEXTPrivate Key SourcePrivate Key SourcePROPERTIESCertificate Chain LocationCertificate Chain LocationPEM X.509 Certificate Chain file location associated with Private Key starting with standard BEGIN CERTIFICATE headertruefalsefalseNONEfalsefalseSINGLEFILEPrivate Key SourcePrivate Key SourceFILESCertificate Authorities SourceCertificate Authorities SourceSource of information for loading trusted Certificate AuthoritiesPROPERTIESPropertiesPROPERTIESLoad trusted Certificate Authorities from configured propertiesSystemSYSTEMLoad trusted Certificate Authorities from the default system locationtruefalsefalseNONEfalsefalseCertificate AuthoritiesCertificate AuthoritiesPEM X.509 Certificate Authorities trusted for verifying peers in TLS communications containing one or more standard certificatestruefalsefalseNONEfalsefalseSINGLEFILETEXTCertificate Authorities SourceCertificate Authorities SourcePROPERTIESorg.apache.nifi.ssl.SSLContextProviderorg.apache.nifinifi-standard-services-api-nar2.3.0org.apache.nifi.ssl.StandardRestrictedSSLContextServiceCONTROLLER_SERVICERestricted implementation of the SSLContextService. Provides the ability to configure keystore and/or truststore properties once and reuse that configuration throughout the application, but only allows a restricted set of TLS/SSL protocols to be chosen (no SSL protocols are supported). The set of protocols selectable will evolve over time as new protocols emerge and older protocols are deprecated. This service is recommended over StandardSSLContextService if a component doesn't expect to communicate with legacy systems since it is unlikely that legacy systems will support these protocols.tlssslsecurecertificatekeystoretruststorejksp12pkcs12pkcsKeystore FilenameKeystore FilenameThe fully-qualified filename of the KeystorefalsefalsetrueENVIRONMENTfalsefalseSINGLEFILEKeystore PasswordKeystore PasswordThe password for the KeystorefalsetruefalseNONEfalsefalsekey-passwordKey PasswordThe password for the key. If this is not specified, but the Keystore Filename, Password, and Type are specified, then the Keystore Password will be assumed to be the same as the Key Password.falsetruefalseNONEfalsefalseKeystore TypeKeystore TypeThe Type of the KeystoreBCFKSBCFKSPKCS12PKCS12JKSJKSfalsefalsefalseNONEfalsefalseTruststore FilenameTruststore FilenameThe fully-qualified filename of the TruststorefalsefalsetrueENVIRONMENTfalsefalseSINGLEFILETruststore PasswordTruststore PasswordThe password for the TruststorefalsetruefalseNONEfalsefalseTruststore TypeTruststore TypeThe Type of the TruststoreBCFKSBCFKSPKCS12PKCS12JKSJKSfalsefalsefalseNONEfalsefalseSSL ProtocolTLS ProtocolTLS Protocol Version for encrypted connections. Supported versions depend on the specific version of Java used.TLSTLSTLSNegotiate latest protocol version based on platform supported versionsTLSv1.3TLSv1.3Require TLSv1.3 protocol versionTLSv1.2TLSv1.2Require TLSv1.2 protocol versionfalsefalsefalseNONEfalsefalseorg.apache.nifi.ssl.SSLContextServiceorg.apache.nifinifi-standard-services-api-nar2.3.0org.apache.nifi.ssl.RestrictedSSLContextServiceorg.apache.nifinifi-standard-services-api-nar2.3.0org.apache.nifi.ssl.SSLContextProviderorg.apache.nifinifi-standard-services-api-nar2.3.0org.apache.nifi.ssl.StandardSSLContextServiceCONTROLLER_SERVICEStandard implementation of the SSLContextService. Provides the ability to configure keystore and/or truststore properties once and reuse that configuration throughout the application. This service can be used to communicate with both legacy and modern systems. If you only need to communicate with non-legacy systems, then the StandardRestrictedSSLContextService is recommended as it only allows a specific set of SSL protocols to be chosen.sslsecurecertificatekeystoretruststorejksp12pkcs12pkcstlsKeystore FilenameKeystore FilenameThe fully-qualified filename of the KeystorefalsefalsetrueENVIRONMENTfalsefalseSINGLEFILEKeystore PasswordKeystore PasswordThe password for the KeystorefalsetruefalseNONEfalsefalsekey-passwordKey PasswordThe password for the key. If this is not specified, but the Keystore Filename, Password, and Type are specified, then the Keystore Password will be assumed to be the same as the Key Password.falsetruefalseNONEfalsefalseKeystore TypeKeystore TypeThe Type of the KeystoreBCFKSBCFKSPKCS12PKCS12JKSJKSfalsefalsefalseNONEfalsefalseTruststore FilenameTruststore FilenameThe fully-qualified filename of the TruststorefalsefalsetrueENVIRONMENTfalsefalseSINGLEFILETruststore PasswordTruststore PasswordThe password for the TruststorefalsetruefalseNONEfalsefalseTruststore TypeTruststore TypeThe Type of the TruststoreBCFKSBCFKSPKCS12PKCS12JKSJKSfalsefalsefalseNONEfalsefalseSSL ProtocolTLS ProtocolSSL or TLS Protocol Version for encrypted connections. Supported versions include insecure legacy options and depend on the specific version of Java used.TLSSSLSSLNegotiate latest SSL or TLS protocol version based on platform supported versionsTLSTLSNegotiate latest TLS protocol version based on platform supported versionsTLSv1.3TLSv1.3Require TLSv1.3 protocol versionTLSv1.2TLSv1.2Require TLSv1.2 protocol versionTLSv1.1TLSv1.1Require TLSv1.1 protocol versionTLSv1TLSv1Require TLSv1 protocol versionfalsefalsefalseNONEfalsefalseorg.apache.nifi.ssl.SSLContextServiceorg.apache.nifinifi-standard-services-api-nar2.3.0org.apache.nifi.ssl.SSLContextProviderorg.apache.nifinifi-standard-services-api-nar2.3.0