Post-Upgrade Tasks for NiFi
About This Task
If you are upgrading to HDF 3.1.x, you must update some dataflows with a new Controller Service. For flows requiring the new StandardRestrictedSSLContextService, you must create the new context service and associate it with necessary Processors.
Context
StandardRestrictedSSLContextService is a new Controller Service that supports TLS version 1.2 and later. It provides the ability to configure keystore and/or truststore properties once and reuse that configuration throughout the application, but only allows you to choose a restricted set of TLS protocols. This service is recommended over StandardSSLContextService unless a component communicates with legacy systems supporting only SSL protocols.
The following Processors require StandardRestrictedSSLContextService:
ListenBeats
ListenHTTP
ListenLumberjack
ListenRELP
ListenSMTP
ListenSyslog
ListenTCP
ListenTCPRecord
Steps
For one of the impacted Processors, double-click to edit the Processor and click the Properties tab.
Edit the SSL Context Service property value.
Select Create new service … from the drop-down menu.
Use the Add Controller Service dialog to create StandardRestrictedSSLContextService.
Result
Once you have created StandardRestrictedSSLContextService and associated it with one Processor, you can update any other Processors with the same Controller Service.