apache nifi 中的 SSL 上下文服务 [英] SSL context service in apache nifi
问题描述
大家早上好我制作了一个使用 GetHttp 和 PostHttp 的 apache Nifi 项目.问题是发生了错误:我在谷歌上找过，但我不明白该怎么做?什么是 SSL 证书?如何添加?
Good morning everyone I made an apache Nifi project where I use GetHttp and PostHttp. The thing is that an error is occurring: I looked for it on google but I did not understand exactly what to do? what is SSL cert? how to add it?
推荐答案
您需要创建和配置一个 SSLContextService 供处理器使用，以便它可以与 DataSift 服务提供的证书建立信任.curl 之所以有效，是因为它为您绑定了默认的系统信任库.
You will need to create and configure an SSLContextService for the processor to use so that it can establish trust with the certificate being presented by the DataSift service. curl works because it is tying into the default system truststore for you.
要在命令行上提供与 curl 类似的体验，您需要使用以下命令为 SSL 上下文服务实例配置信任库属性:
To provide a similar experience as curl on the command line, you will need to configure the truststore properties for your SSL Context Service instance with:
- 信任库文件名:
Java 安装中的 cacerts 文件如果在您的系统上设置了 $JAVA_HOME，它应该可以帮助您指明正确的方向.如果不是，则 cacerts 的位置因环境而异，但它们各自的操作系统大致如下
the cacerts file from your Java installation If $JAVA_HOME Is set on your system, it should help point you in the right direction. If not, the location of cacerts varies depending on environment, but is approximately the following for their respective OS
- OS X:/Library/Java/JavaVirtualMachines/jdk.jdk/Contents/Home/jre/lib/security/cacerts
- Windows:C:\Program Files\Java\jdk\jre\lib\security\cacerts
Linux:/usr/lib/jvm/java-/jre/lib/security/cacerts -- 你
还可以使用 $(readlink -f $(which java))
- OS X: /Library/Java/JavaVirtualMachines/jdk.jdk/Contents/Home/jre/lib/security/cacerts
- Windows: C:\Program Files\Java\jdk\jre\lib\security\cacerts
Linux: /usr/lib/jvm/java-/jre/lib/security/cacerts -- You
can additionally use $(readlink -f $(which java))
- 信任库类型:JKS
- 信任库密码:如果您使用默认 Java 密钥库，则为changeit"的默认密码
创建并启用此控制器服务后，需要更新关联的 GetHTTP 以引用它.
这篇关于apache nifi 中的 SSL 上下文服务的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
