https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391409#M247607 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/35454">@MattWho</a>&nbsp;&nbsp;We are using Jndi Configurations, there is no option to pass ssl with jndi configurations.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="akash007_0-1722951275108.png" style="width: 400px;"><img src="https://community.cloudera.com/t5/image/serverpage/image-id/41378i13CBFFF015AC4F60/image-size/medium?v=v2&amp;px=400" role="button" title="akash007_0-1722951275108.png" alt="akash007_0-1722951275108.png" /></span></P><P>&nbsp;</P> Tue, 06 Aug 2024 13:36:24 GMT akash007 2024-08-06T13:36:24Z https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391373#M247588 <DIV class="votecell post-layout--left"><DIV class="js-voting-container d-flex jc-center fd-column ai-center gs4 fc-black-300"><DIV class="js-vote-count flex--item d-flex fd-column ai-center fc-theme-body-font fw-bold fs-subheading py4">&nbsp;</DIV></DIV></DIV><DIV class="postcell post-layout--right"><DIV class="s-prose js-post-body"><P>I have ConsumeJMS Processor in Nifi, which i have setup using JndiJmsConnectionFactoryHandler. I want to execute this nifi processor with a custom keystore. like how we do when we run java class as follow</P><P>$JAVA_HOME/bin/java -Djavax.net.ssl.trustStore=keystore -Djavax.net.ssl.keystore=keystore -Djavax.net.ssl.trustStorePassword=**** -Djavax.net.ssl.keyStorePassword=**** -classpath ___ com.example.Application</P><P>I have checked the truststore we have at the root nifi directory. which is configured in bootstrap configuration file we don't want to touch it we just want to run consumeJMS Processor with a some specific keystore and truststore.</P></DIV></DIV> Mon, 05 Aug 2024 18:21:29 GMT https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391373#M247588 akash007 2024-08-05T18:21:29Z https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391390#M247597 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/114325">@akash007</a>,&nbsp;Welcome to our community! To help you get the best possible answer, I have tagged in our NiFi experts&nbsp;<a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/80381">@SAMSAL</a>&nbsp;<a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/35454">@MattWho</a>&nbsp;<a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/38301">@mburgess</a>&nbsp; who may be able to assist you further.<BR /><BR />Please feel free to provide any additional information or details about your query, and we hope that you will find a satisfactory solution to your question.</P> Tue, 06 Aug 2024 09:47:21 GMT https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391390#M247597 VidyaSargur 2024-08-06T09:47:21Z https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391399#M247603 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/114325">@akash007</a>&nbsp;<BR /><BR />The <A href="https://nifi.apache.org/docs/nifi-docs/components/org.apache.nifi/nifi-jms-processors-nar/1.27.0/org.apache.nifi.jms.processors.ConsumeJMS/index.html" target="_blank">ConsumeJMS</A> processor configuration has an option to select a&nbsp;<A href="https://nifi.apache.org/docs/nifi-docs/components/org.apache.nifi/nifi-ssl-context-service-nar/1.27.0/org.apache.nifi.ssl.StandardRestrictedSSLContextService/index.html" target="_blank">StandardRestrictedSSLContextService</A>&nbsp;which would be configured with the keystore and/or truststore needed to facilitate your TLS connection with a secured JMS endpoint.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MattWho_0-1722946508695.png" style="width: 706px;"><img src="https://community.cloudera.com/t5/image/serverpage/image-id/41371iF00D725512EE9AD7/image-dimensions/706x531?v=v2" width="706" height="531" role="button" title="MattWho_0-1722946508695.png" alt="MattWho_0-1722946508695.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MattWho_1-1722946563434.png" style="width: 611px;"><img src="https://community.cloudera.com/t5/image/serverpage/image-id/41372iA8087F5CEA6B2EAF/image-dimensions/611x545?v=v2" width="611" height="545" role="button" title="MattWho_1-1722946563434.png" alt="MattWho_1-1722946563434.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="MattWho_2-1722946610635.png" style="width: 691px;"><img src="https://community.cloudera.com/t5/image/serverpage/image-id/41373i18644811272E5541/image-dimensions/691x477?v=v2" width="691" height="477" role="button" title="MattWho_2-1722946610635.png" alt="MattWho_2-1722946610635.png" /></span></P><P>For one-way TLS, You'll only need to configure the Truststore properties.&nbsp; If mutual TLS is needed, you'll need to configure both the keystore and truststore properties.</P><P>Please help our community thrive. If you found<SPAN>&nbsp;</SPAN><STRONG>any</STRONG><SPAN>&nbsp;</SPAN>of the suggestions/solutions provided helped you with solving your issue or answering your question, please take a moment to login and click "<SPAN><EM><STRONG><FONT color="#FF0000">Accept as Solution</FONT></STRONG></EM>" on&nbsp;<STRONG>one or more</STRONG>&nbsp;of them that helped.</SPAN></P><P><SPAN>Thank you,<BR />Matt</SPAN></P> Tue, 06 Aug 2024 12:18:19 GMT https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391399#M247603 MattWho 2024-08-06T12:18:19Z https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391409#M247607 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/35454">@MattWho</a>&nbsp;&nbsp;We are using Jndi Configurations, there is no option to pass ssl with jndi configurations.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="akash007_0-1722951275108.png" style="width: 400px;"><img src="https://community.cloudera.com/t5/image/serverpage/image-id/41378i13CBFFF015AC4F60/image-size/medium?v=v2&amp;px=400" role="button" title="akash007_0-1722951275108.png" alt="akash007_0-1722951275108.png" /></span></P><P>&nbsp;</P> Tue, 06 Aug 2024 13:36:24 GMT https://community.cloudera.com/t5/Support-Questions/How-to-use-a-Custom-Keystore-and-Truststore-with-Consume-JMS/m-p/391409#M247607 akash007 2024-08-06T13:36:24Z