Skip to content

Commit

Permalink
NIFI-7468 Updated SSLSocketChannel to support TLS 1.3
Browse files Browse the repository at this point in the history
- Handling additional FINISHED Handshake Status for TLS 1.3 Post-Handshake Messages per RFC 8446 Section 4.6
- Removed clearing buffers after handshake to avoid losing packets
- Updated read() method to check Handshake Status after SSLEngine.unwrap()
- Changed SSLSocketChannelSender to close SSLSocketChannel before other resources
- Added ChannelStatus enum and convenience logging methods for tracing status
- Added unit tests for TLS 1.2 and 1.3 using Netty server and client handlers
  • Loading branch information
exceptionfactory committed Jun 12, 2021
1 parent 1a515ee commit 039b125
Show file tree
Hide file tree
Showing 4 changed files with 846 additions and 410 deletions.
12 changes: 12 additions & 0 deletions nifi-commons/nifi-security-socket-ssl/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -31,5 +31,17 @@
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
</dependency>
<dependency>
<groupId>org.apache.nifi</groupId>
<artifactId>nifi-security-utils</artifactId>
<version>1.14.0-SNAPSHOT</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-handler</artifactId>
<version>4.1.63.Final</version>
<scope>test</scope>
</dependency>
</dependencies>
</project>

0 comments on commit 039b125

Please sign in to comment.