- calculateExpectedMemory(int, int, int) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
Returns the expected memory cost of the provided parameters in bytes.
- calculateSaltLength(EncryptionMethod) - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- CertificateUtils - Class in org.apache.nifi.security.util
-
- CertificateUtils() - Constructor for class org.apache.nifi.security.util.CertificateUtils
-
- CertificateUtils.ClientAuth - Enum in org.apache.nifi.security.util
-
- channel - Variable in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- channel - Variable in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannelInputStream
-
- channel - Variable in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannelOutputStream
-
- check(String, String) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
Compare the supplied plaintext password to a hashed password.
- checkTGTAndRelogin() - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
Re-login a user from keytab if TGT is expired or is close to expiry.
- checkTGTAndRelogin() - Method in interface org.apache.nifi.security.krb.KerberosUser
-
Performs a re-login if the TGT is close to expiration.
- cipherByteLength - Variable in class org.apache.nifi.security.repository.RepositoryObjectEncryptionMetadata
-
- CipherProvider - Interface in org.apache.nifi.security.util.crypto
-
Marker interface for cipher providers.
- CipherProviderFactory - Class in org.apache.nifi.security.util.crypto
-
- CipherProviderFactory() - Constructor for class org.apache.nifi.security.util.crypto.CipherProviderFactory
-
- CipherUtility - Class in org.apache.nifi.security.util.crypto
-
- CipherUtility() - Constructor for class org.apache.nifi.security.util.crypto.CipherUtility
-
- ClientAuth(int, String) - Constructor for enum org.apache.nifi.security.util.CertificateUtils.ClientAuth
-
- ClientAuth() - Constructor for enum org.apache.nifi.security.util.SslContextFactory.ClientAuth
-
- close() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- close() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannelInputStream
-
Closes the underlying SSLSocketChannel, which will also close the OutputStream and connection
- close() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannelOutputStream
-
Closes the underlying SSLSocketChannel, which also will close the InputStream and the connection
- closed - Variable in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- closeQuietly(Closeable) - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- compareDNs(String, String) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Returns true if the two provided DNs are equivalent, regardless of the order of the elements.
- compatibleWithStrongKDFs - Variable in enum org.apache.nifi.security.util.EncryptionMethod
-
- concatByteArrays(byte[]...) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Concatenates multiple byte[] into a single byte[].
- ConfigurationUtil - Interface in org.apache.nifi.security.krb
-
- connect() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- connected - Variable in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- constantTimeEquals(String, String) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns true if the two parameters are equal.
- constantTimeEquals(char[], char[]) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns true if the two parameters are equal.
- constantTimeEquals(byte[], byte[]) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns true if the two parameters are equal.
- consume() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- consume() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannelInputStream
-
- CONTENT_HEADER_SIZE - Static variable in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- ContentRepositoryEncryptionConfiguration - Class in org.apache.nifi.security.repository.config
-
- ContentRepositoryEncryptionConfiguration(NiFiProperties) - Constructor for class org.apache.nifi.security.repository.config.ContentRepositoryEncryptionConfiguration
-
Contructor which accepts a
NiFiProperties object and extracts the relevant
property values directly.
- ContentRepositoryEncryptionConfiguration(String, String, String, Map<String, String>, String) - Constructor for class org.apache.nifi.security.repository.config.ContentRepositoryEncryptionConfiguration
-
Constructor which accepts explicit values for each configuration value.
- convertAbstractX509Certificate(Certificate) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- convertCharsToBytes(char[]) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns a byte[] containing the value of the provided char[] without using new String(chars).getBytes() which would put sensitive data (the password) in the String pool.
- convertLegacyX509Certificate(X509Certificate) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- copyFromAppDataBuffer(byte[], int, int) - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- createDnOrderMap() - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- createDocumentBuilder() - Method in class org.apache.nifi.security.xml.SafeXMLConfiguration
-
This overridden createDocumentBuilder() method sets the appropriate factory attributes to disable XXE parsing.
- createLoginContext(Subject) - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
- createLoginContext(Subject) - Method in class org.apache.nifi.security.krb.KerberosKeytabUser
-
- createLoginContext(Subject) - Method in class org.apache.nifi.security.krb.KerberosPasswordUser
-
- createSafeReader(InputStream) - Static method in class org.apache.nifi.security.xml.XmlUtils
-
- createSafeReader(StreamSource) - Static method in class org.apache.nifi.security.xml.XmlUtils
-
- createSafeSaxReader(SAXParserFactory, ContentHandler) - Static method in class org.apache.nifi.security.xml.XmlUtils
-
- createSslContext(String, char[], String, String, char[], String, SslContextFactory.ClientAuth, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance using the given information.
- createSslContext(String, char[], char[], String, String, char[], String, SslContextFactory.ClientAuth, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance using the given information.
- createSslContext(String, char[], String, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance using the given information.
- createSslContext(String, char[], char[], String, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance using the given information.
- createSslContextWithTrustManagers(String, char[], char[], String, String, char[], String, SslContextFactory.ClientAuth, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance paired with its TrustManager instances using the given information.
- createSslContextWithTrustManagers(String, char[], char[], String, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance paired with its TrustManager instances using the given information.
- createTrustSslContext(String, char[], String, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance using the given information.
- createTrustSslContextWithTrustManagers(String, char[], String, String) - Static method in class org.apache.nifi.security.util.SslContextFactory
-
Creates a SSLContext instance paired with its TrustManager instances using the given information.
- CryptoUtils - Class in org.apache.nifi.security.kms
-
- CryptoUtils() - Constructor for class org.apache.nifi.security.kms.CryptoUtils
-
- EM_END_SENTINEL - Static variable in class org.apache.nifi.security.repository.AbstractAESEncryptor
-
- EM_START_SENTINEL - Static variable in class org.apache.nifi.security.repository.AbstractAESEncryptor
-
- EM_START_SENTINEL - Static variable in class org.apache.nifi.security.repository.stream.aes.RepositoryObjectAESCTREncryptor
-
- EMPTY_IV - Static variable in class org.apache.nifi.security.repository.AbstractAESEncryptor
-
- EMPTY_IV - Static variable in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- EMPTY_SALT - Static variable in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- encodeBase64NoPadding(byte[]) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- encodeParams(int, int, int) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- encrypt(byte[], String, String) - Method in class org.apache.nifi.security.repository.block.aes.RepositoryObjectAESGCMEncryptor
-
Encrypts the serialized byte[].
- encrypt(byte[], String, String) - Method in interface org.apache.nifi.security.repository.block.RepositoryObjectBlockEncryptor
-
Encrypts the serialized byte[].
- encrypt(OutputStream, String, String) - Method in class org.apache.nifi.security.repository.stream.aes.RepositoryObjectAESCTREncryptor
-
Returns an
OutputStream which encrypts the content of the provided OutputStream.
- encrypt(OutputStream, String, String) - Method in interface org.apache.nifi.security.repository.stream.RepositoryObjectStreamEncryptor
-
Encrypts the serialized byte[].
- encryptAndWriteFully(BufferStateManager) - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- ENCRYPTED_FSR_CLASS_NAME - Static variable in class org.apache.nifi.security.kms.CryptoUtils
-
- EncryptionException - Exception in org.apache.nifi.security.kms
-
Class used to denote a problem configuring encryption services or encrypting/decrypting data.
- EncryptionException(String) - Constructor for exception org.apache.nifi.security.kms.EncryptionException
-
Constructs a new exception with the specified detail message.
- EncryptionException(String, Throwable) - Constructor for exception org.apache.nifi.security.kms.EncryptionException
-
Constructs a new exception with the specified detail message and
cause.
- EncryptionException(Throwable) - Constructor for exception org.apache.nifi.security.kms.EncryptionException
-
Constructs a new exception with the specified cause and a detail
message of (cause==null ? null : cause.toString()) (which
typically contains the class and detail message of cause).
- EncryptionException(String, Throwable, boolean, boolean) - Constructor for exception org.apache.nifi.security.kms.EncryptionException
-
Constructs a new exception with the specified detail message,
cause, suppression enabled or disabled, and writable stack
trace enabled or disabled.
- encryptionKeyId - Variable in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
- encryptionKeys - Variable in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
- EncryptionMethod - Enum in org.apache.nifi.security.util
-
Enumeration capturing essential information about the various encryption
methods that might be supported.
- EncryptionMethod(String, String, boolean, boolean) - Constructor for enum org.apache.nifi.security.util.EncryptionMethod
-
- encryptionProcess - Variable in enum org.apache.nifi.security.repository.RepositoryType
-
- engine - Variable in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- escapeLiteralBackReferences(String, int) - Static method in class org.apache.nifi.authorization.util.IdentityMappingUtil
-
- EWAFFR_CLASS_NAME - Static variable in class org.apache.nifi.security.kms.CryptoUtils
-
- EWAPR_CLASS_NAME - Static variable in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- execute() - Method in class org.apache.nifi.security.krb.KerberosAction
-
- extractCipherBytes(byte[], RepositoryObjectEncryptionMetadata) - Method in class org.apache.nifi.security.repository.block.aes.RepositoryObjectAESGCMEncryptor
-
- extractCipherBytes(byte[], RepositoryObjectEncryptionMetadata) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- extractEncryptionMetadata(byte[]) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- extractEncryptionMetadata(InputStream) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- extractKeyFromBootstrapFile() - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns the key (if any) used to encrypt sensitive properties, extracted from $NIFI_HOME/conf/bootstrap.conf.
- extractKeyFromBootstrapFile(String) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns the key (if any) used to encrypt sensitive properties, extracted from $NIFI_HOME/conf/bootstrap.conf.
- extractPeerDNFromClientSSLSocket(SSLSocket) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Returns the DN extracted from the client certificate.
- extractPeerDNFromServerSSLSocket(Socket) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Returns the DN extracted from the server certificate.
- extractPeerDNFromSSLSocket(Socket) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Returns the DN extracted from the peer certificate (the server DN if run on the client; the client DN (if available) if run on the server).
- extractUsername(String) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Extracts the username from the specified DN.
- generateIssuedCertificate(String, PublicKey, X509Certificate, KeyPair, String, int) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- generateIssuedCertificate(String, PublicKey, Extensions, X509Certificate, KeyPair, String, int) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- generateIV() - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- generateIV() - Method in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
Generates a new random IV of the correct length.
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- generateSalt(EncryptionMethod) - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- generateSalt() - Method in interface org.apache.nifi.security.util.crypto.PBECipherProvider
-
Returns a random salt suitable for this cipher provider.
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- generateSalt() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- generateSelfSignedX509Certificate(KeyPair, String, String, int) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Generates a self-signed
X509Certificate suitable for use as a Certificate Authority.
- getAlgorithm() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- getAppConfigurationEntry(String) - Method in class org.apache.nifi.security.krb.KerberosPasswordUser.PasswordConfig
-
- getAppConfigurationEntry(String) - Method in class org.apache.nifi.security.krb.KeytabConfiguration
-
- getAvailableKeyIds() - Method in interface org.apache.nifi.security.kms.KeyProvider
-
Returns a list of available key identifiers (useful for encryption, as retired keys may not be listed here even if they are available for decryption for legacy/BC reasons).
- getAvailableKeyIds() - Method in class org.apache.nifi.security.kms.StaticKeyProvider
-
Returns a singleton list of the available key identifier.
- getCipher(EncryptionMethod, SecretKey, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, SecretKey, boolean) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, SecretKey, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, SecretKey, boolean) - Method in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
Convenience method without key length parameter.
- getCipher(EncryptionMethod, String, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
Convenience method without key length parameter.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in interface org.apache.nifi.security.util.crypto.PBECipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.RandomIVPBECipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipher(EncryptionMethod, String, byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns an initialized cipher for the specified algorithm.
- getCipherProvider(KeyDerivationFunction) - Static method in class org.apache.nifi.security.util.crypto.CipherProviderFactory
-
- getClientAuthStatus(SSLSocket) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
- getDefaultFilePath() - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns the default file path to $NIFI_HOME/conf/nifi.properties.
- getDefaultKeyLengthForCipher(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- getDefaultSaltLength() - Method in interface org.apache.nifi.security.util.crypto.PBECipherProvider
-
Returns the default salt length for this implementation.
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getDefaultSaltLength() - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- getDefaultSaltLength() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getDescription() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
- getDescription() - Method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
- getDigestBytesLength() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
- getDn() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- getEncryptionKeyId() - Method in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
Returns the "active" encryption key id.
- getEncryptionKeys() - Method in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
Returns a map of all available encryption keys indexed by the key id if using
StaticKeyProvider.
- getEncryptionProcess() - Method in enum org.apache.nifi.security.repository.RepositoryType
-
- getExtensionsFromCSR(JcaPKCS10CertificationRequest) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Extract extensions from CSR object
- getGroupMappings(NiFiProperties) - Static method in class org.apache.nifi.authorization.util.IdentityMappingUtil
-
Buils the group mappings from NiFiProperties.
- getIdentityMappings(NiFiProperties) - Static method in class org.apache.nifi.authorization.util.IdentityMappingUtil
-
Builds the identity mappings from NiFiProperties.
- getInitializedCipher(EncryptionMethod, SecretKey, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], boolean) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getInitializedCipher(EncryptionMethod, String, byte[], byte[], int, boolean) - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getIterationCount() - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- getIterationCount() - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- getIterationCount() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getIterationCountForAlgorithm(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns the KDF iteration count for various PBE algorithms.
- getKey() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getKey(String) - Method in interface org.apache.nifi.security.kms.KeyProvider
-
Returns the key identified by this ID or throws an exception if one is not available.
- getKey(String) - Method in class org.apache.nifi.security.kms.StaticKeyProvider
-
Returns the key identified by this ID or throws an exception if one is not available.
- getKeyProviderImplementation() - Method in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
Returns the class name of the
KeyProvider implementation used.
- getKeyProviderLocation() - Method in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
Returns the location of the key provider.
- getKeyStore(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns an empty KeyStore backed by the appropriate provider
- getKeyStoreProvider(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns the provider that will be used for the given keyStoreType
- getKeytabFile() - Method in class org.apache.nifi.security.krb.KerberosKeytabUser
-
- getKeytabFile() - Method in class org.apache.nifi.security.krb.KeytabConfiguration
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.RandomIVPBECipherProvider
-
- getLogger() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getMappings(NiFiProperties, String, String, String, Supplier<String>) - Static method in class org.apache.nifi.authorization.util.IdentityMappingUtil
-
- getMasterKey() - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns the master key from the bootstrap.conf file used to encrypt various sensitive properties and data encryption keys.
- getMaximumPasswordLengthForAlgorithmOnLimitedStrengthCrypto(EncryptionMethod) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- getN() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getName() - Method in enum org.apache.nifi.security.repository.RepositoryType
-
- getName() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
- getName() - Method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
- getNextKeyId() - Method in class org.apache.nifi.security.repository.block.aes.RepositoryObjectAESGCMEncryptor
-
Returns a valid key identifier for this encryptor (valid for encryption and decryption) or throws an exception if none are available.
- getNextKeyId() - Method in interface org.apache.nifi.security.repository.block.RepositoryObjectBlockEncryptor
-
Returns a valid key identifier for this encryptor (valid for encryption and decryption) or throws an exception if none are available.
- getNextKeyId() - Method in class org.apache.nifi.security.repository.stream.aes.RepositoryObjectAESCTREncryptor
-
Returns a valid key identifier for this encryptor (valid for encryption and decryption) or throws an exception if none are available.
- getNextKeyId() - Method in interface org.apache.nifi.security.repository.stream.RepositoryObjectStreamEncryptor
-
Returns a valid key identifier for this encryptor (valid for encryption and decryption) or throws an exception if none are available.
- getP() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getPackagePath() - Method in enum org.apache.nifi.security.repository.RepositoryType
-
- getPattern() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getPRFName() - Method in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- getPrincipal() - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
- getPrincipal() - Method in interface org.apache.nifi.security.krb.KerberosUser
-
- getPrincipal() - Method in class org.apache.nifi.security.krb.KeytabConfiguration
-
- getProvider() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- getR() - Method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
- getRealm(String) - Static method in class org.apache.nifi.security.util.krb.KerberosPrincipalParser
-
Determines the realm specified in the given kerberos principal.
- getRefreshTime(KerberosTicket) - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
- getReplacementValue() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getRepositoryImplementation() - Method in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
Returns the class name for the repository implementation.
- getRepositoryType() - Method in class org.apache.nifi.security.repository.config.RepositoryEncryptionConfiguration
-
- getSaltLengthForAlgorithm(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns the salt length for various PBE algorithms.
- getStorePasswordProperty() - Method in enum org.apache.nifi.security.util.SecurityStoreTypes
-
Returns the keystore (or truststore) password property.
- getStoreProperty() - Method in enum org.apache.nifi.security.util.SecurityStoreTypes
-
Returns the keystore (or truststore) property.
- getStoreTypeProperty() - Method in enum org.apache.nifi.security.util.SecurityStoreTypes
-
Returns the keystore (or truststore) type property.
- getSubject() - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
- getSubject() - Method in class org.apache.nifi.security.krb.KerberosKeytabUser
-
- getSubjectAlternativeNames(X509Certificate) - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Returns a list of subject alternative names.
- getSupportedCharsets() - Static method in class org.apache.nifi.security.util.crypto.HashService
-
- getTGT() - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
Get the Kerberos TGT.
- getTimeout() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- getTransform() - Method in class org.apache.nifi.authorization.util.IdentityMapping
-
- getTrustStore(String) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns an empty KeyStore intended for use as a TrustStore backed by the appropriate provider
- getUniqueSerialNumber() - Static method in class org.apache.nifi.security.util.CertificateUtils
-
Generates a unique serial number by using the current time in milliseconds left shifted 32 bits (to make room for incrementor) with an incrementor added
- getValidKeyLengthsForAlgorithm(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns a list of valid key lengths in bits for this algorithm.
- getWorkFactor() - Method in class org.apache.nifi.security.util.crypto.BcryptCipherProvider
-
- IBM_KRB5_LOGIN_MODULE - Static variable in interface org.apache.nifi.security.krb.ConfigurationUtil
-
- IdentityMapping - Class in org.apache.nifi.authorization.util
-
Holder to pass around the key, pattern, and replacement from an identity mapping in NiFiProperties.
- IdentityMapping(String, Pattern, String) - Constructor for class org.apache.nifi.authorization.util.IdentityMapping
-
- IdentityMapping(String, Pattern, String, IdentityMapping.Transform) - Constructor for class org.apache.nifi.authorization.util.IdentityMapping
-
- IdentityMapping.Transform - Enum in org.apache.nifi.authorization.util
-
- IdentityMappingUtil - Class in org.apache.nifi.authorization.util
-
- IdentityMappingUtil() - Constructor for class org.apache.nifi.authorization.util.IdentityMappingUtil
-
- initCipher(AESKeyedCipherProvider, EncryptionMethod, int, SecretKey, byte[]) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- initFileLocator(FileLocator) - Method in class org.apache.nifi.security.xml.SafeXMLConfiguration
-
- initialize(KeyProvider) - Method in class org.apache.nifi.security.repository.AbstractAESEncryptor
-
- initialize(KeyProvider) - Method in interface org.apache.nifi.security.repository.block.RepositoryObjectBlockEncryptor
-
- initialize(KeyProvider) - Method in interface org.apache.nifi.security.repository.RepositoryObjectEncryptor
-
- initialize(KeyProvider) - Method in interface org.apache.nifi.security.repository.stream.RepositoryObjectStreamEncryptor
-
- initPBECipher(String, String, String, byte[], int, boolean) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Initializes a
Cipher object with the given PBE parameters.
- integerify(byte[], int, int) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
- interrupt() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- interrupted - Variable in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- IS_IBM - Static variable in interface org.apache.nifi.security.krb.ConfigurationUtil
-
- isBlake2() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns true if this hash algorithm is Blake2, as it requires different initialization through BouncyCastle.
- isClosed() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- isCompatibleWithStrongKDFs() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isContentRepositoryEncryptionConfigured(NiFiProperties) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
Returns true if the content repository is correctly configured for an encrypted
implementation.
- isDataAvailable() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannel
-
- isDataAvailable() - Method in class org.apache.nifi.remote.io.socket.ssl.SSLSocketChannelInputStream
-
- isEmpty(String) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Utility method which returns true if the string is null, empty, or entirely whitespace.
- isFlowFileRepositoryEncryptionConfigured(NiFiProperties) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
Returns true if the flowfile repository is correctly configured for an encrypted
implementation.
- isHexString(String) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns true if the input is valid hexadecimal (does not enforce length and is case-insensitive).
- isKeyedCipher(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- isKeyedCipher() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isKeyPasswordCorrect(URL, KeystoreType, char[], char[]) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns true if the given keystore can be loaded using the given keystore type and password and the default
(first) alias can be retrieved with the key-specific password.
- isLoggedIn() - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
- isLoggedIn() - Method in interface org.apache.nifi.security.krb.KerberosUser
-
- isPBECipher(String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- isPBECipher() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isProvenanceRepositoryEncryptionConfigured(NiFiProperties) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
Returns true if the provenance repository is correctly configured for an
encrypted implementation.
- isPValid(int, int) - Static method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns whether the provided parallelization factor (p value) is within boundaries.
- isRepositoryEncryptionConfigured(NiFiProperties, RepositoryType) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
Returns true if the specified repository is correctly configured for an
encrypted implementation.
- isRValid(int) - Static method in class org.apache.nifi.security.util.crypto.ScryptCipherProvider
-
Returns whether the provided block size (r value) is a positive integer or not.
- isStoreValid(URL, KeystoreType, char[]) - Static method in class org.apache.nifi.security.util.KeyStoreUtils
-
Returns true if the given keystore can be loaded using the given keystore type and password.
- isStrongAlgorithm() - Method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns true if this algorithm is considered cryptographically secure.
- isStrongKDF() - Method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
- isTGSPrincipal(KerberosPrincipal) - Method in class org.apache.nifi.security.krb.AbstractKerberosUser
-
TGS must have the server principal of the form "krbtgt/FOO@FOO".
- isUnlimitedStrength() - Method in enum org.apache.nifi.security.util.EncryptionMethod
-
- isUnlimitedStrengthCryptoAvailable() - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
- isUnlimitedStrengthCryptoSupported() - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
- isValidKeyLength(SecretKey) - Method in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- isValidKeyLength(int, String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns true if the provided key length is a valid key length for the provided cipher family.
- isValidKeyLengthForAlgorithm(int, String) - Static method in class org.apache.nifi.security.util.crypto.CipherUtility
-
Returns true if the provided key length is a valid key length for the provided algorithm.
- isValidKeyProvider(String, String, String, Map<String, String>) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns true if the provided configuration values successfully define the specified
KeyProvider.
- isValidRepositoryEncryptionConfiguration(RepositoryEncryptionConfiguration) - Static method in class org.apache.nifi.security.kms.CryptoUtils
-
Returns true if the provided configuration values are valid (shallow evaluation only; does not validate the keys
contained in a
FileBasedKeyProvider).
- isXXERelatedException(ConfigurationException) - Method in class org.apache.nifi.security.xml.SafeXMLConfiguration
-
Determine if the ConfigurationException was thrown because the XML configuration file contains an external entity (XXE).
- ITERATION_COUNT - Static variable in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- ITERATION_COUNT - Static variable in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- iterationCount - Variable in class org.apache.nifi.security.util.crypto.PBKDF2CipherProvider
-
- IV_DELIMITER - Static variable in class org.apache.nifi.security.util.crypto.KeyedCipherProvider
-
- IV_DELIMITER - Static variable in class org.apache.nifi.security.util.crypto.RandomIVPBECipherProvider
-
- IV_LENGTH - Static variable in class org.apache.nifi.security.kms.CryptoUtils
-
- IV_LENGTH - Static variable in class org.apache.nifi.security.repository.AbstractAESEncryptor
-
- IV_LENGTH - Static variable in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- IV_LENGTH - Static variable in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- ivBytes - Variable in class org.apache.nifi.security.repository.RepositoryObjectEncryptionMetadata
-
- VALID_KEY_LENGTHS - Static variable in class org.apache.nifi.security.util.crypto.AESKeyedCipherProvider
-
- validate(String, String, ValidationContext) - Method in class org.apache.nifi.security.xml.XXEValidator
-
- validateAndBuildRepositoryKeyProvider(NiFiProperties, RepositoryType) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
Returns a configured
KeyProvider instance for the specified repository type given the configuration values in
nifi.properties.
- validateAndBuildRepositoryKeyProvider(RepositoryEncryptionConfiguration) - Static method in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
Returns a configured
KeyProvider instance for the specified repository type given the configuration values.
- validateSalt(EncryptionMethod, byte[]) - Method in class org.apache.nifi.security.util.crypto.NiFiLegacyCipherProvider
-
Deprecated.
- validateSalt(EncryptionMethod, byte[]) - Method in class org.apache.nifi.security.util.crypto.OpenSSLPKCS5CipherProvider
-
- value - Variable in enum org.apache.nifi.security.util.CertificateUtils.ClientAuth
-
- valueOf(String) - Static method in enum org.apache.nifi.authorization.util.IdentityMapping.Transform
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.repository.RepositoryType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.CertificateUtils.ClientAuth
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.EncryptionMethod
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.KeystoreType
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.SecurityStoreTypes
-
Returns the enum constant of this type with the specified name.
- valueOf(String) - Static method in enum org.apache.nifi.security.util.SslContextFactory.ClientAuth
-
Returns the enum constant of this type with the specified name.
- values() - Static method in enum org.apache.nifi.authorization.util.IdentityMapping.Transform
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.repository.RepositoryType
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.CertificateUtils.ClientAuth
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.crypto.HashAlgorithm
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.EncryptionMethod
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.KeyDerivationFunction
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.KeystoreType
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.SecurityStoreTypes
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- values() - Static method in enum org.apache.nifi.security.util.SslContextFactory.ClientAuth
-
Returns an array containing the constants of this enum type, in
the order they are declared.
- verifyHashFormat(String) - Static method in class org.apache.nifi.security.util.crypto.scrypt.Scrypt
-
Returns true if the provided hash is a valid scrypt hash.
- VERSION - Static variable in class org.apache.nifi.security.repository.block.aes.RepositoryObjectAESGCMEncryptor
-
- VERSION - Static variable in class org.apache.nifi.security.repository.RepositoryEncryptorUtils
-
- version - Variable in class org.apache.nifi.security.repository.RepositoryObjectEncryptionMetadata
-
- VERSION - Static variable in class org.apache.nifi.security.repository.stream.aes.RepositoryObjectAESCTREncryptor
-