question Re: Does Nifi use One-way or two-way SSL authentication? in Archives of Support Questions (Read Only)

Does Nifi use One-way or two-way SSL authentication?

toandyliang — Thu, 16 Feb 2017 21:55:17 GMT

Sorry for asking a silly questions: Does Nifi use One-way or two-way SSL authentication?

Thanks

Andy

Re: Does Nifi use One-way or two-way SSL authentication?

brosander — Thu, 16 Feb 2017 22:25:30 GMT

In secured mode, the default authentication method is via 2-way TLS. If you configure another login identity provider. [1] Then you have the option of using 2-way TLS or either SPNEGO in browser or username/password login with 1 way TLS.

[1] https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#user-authentication

Thanks,

Bryan

Re: Does Nifi use One-way or two-way SSL authentication?

MattWho — Thu, 16 Feb 2017 22:26:10 GMT

@Andy Liang

Most features of NiFi use two-way SSL while few allow for use of only One-way SSL.

Anything that is "machine" to "machine" requires two-way SSL. So using features like NiFi's Site-to-Site or SSL Context Controller services all utilize two-way SSL.

NiFi access to the UI only uses one-way ssl.

Thnaks,

Matt

Re: Does Nifi use One-way or two-way SSL authentication?

srijitachaturve — Fri, 29 Dec 2017 21:02:04 GMT

@Matt Clarke @brosander i am using kerberos as a login identity provider to secure nifi1.1.1 instance, could you please suggest do i need to provide two way ssl for this? or we dont need to do in Nifi-1.1.1, as it is no where mentioned in nifi administration guide to provide ssl certificates with kerberos.

i am following this article: https://community.hortonworks.com/content/kbentry/34147/nifi-security-user-authentication-with-kerberos.html

Thanks a lot in advance!!

Re: Does Nifi use One-way or two-way SSL authentication?

manchun_pandit — Sat, 30 Dec 2017 00:52:02 GMT

This is a hands-on walkthrough configuring SSL/TLS authentication in Apache NiFi. The tasks we will accomplish include:

Creating and installing a user certificate
Setting up the server's KeyStore
Setting up the server's TrustStore
Installing the user certificate into the TrustStore
Configuring authorization for our user

Re: Does Nifi use One-way or two-way SSL authentication?

srijitachaturve — Wed, 03 Jan 2018 01:57:31 GMT

Thanks @Manchun Kumar , but i am unable to find post for this in the link you provided. could you please share the particualr link for ssl/TLS in Nifi-1.1.1 or above