ExceptionFactory

Producing content that a reasonable developer might want to read

Latest Posts

Back to The Future with PEM Certificates in Apache NiFi

NiFi Security Cryptography

2025-05-02 • 7 minute read • David Handermann

Apache NiFi 2.1.0 introduced support for PEM-encoded certificate and private key files in both framework configuration and extension components. The Privacy-Enhanced Mail format is almost forty years old, serving as a common structure for representing security material despite multiple layers of encoding. Bringing PEM support to Apache NiFi expands configuration options, lowering the barrier of integration with certificate management services.

Read more

Between Now and Later: FIPS Compliance and Java Support for Ed25519

Cryptography NiFi Programming Security

2025-02-07 • 6 minute read • David Handermann

The National Institute of Standards and Technology published FIPS 186-5 as the Digital Signature Standard in February 2023. The standard included the Edwards-curve Digital Signature Algorithm with Curve25519 as one of several supported options for cryptographic signing. As of February 2025, however, multiple Java Security Providers do not include Ed25519 among algorithms compliant with FIPS, requiring alternative algorithm configuration or runtime feature detection as implemented in Apache NiFi 2.2.0.

Read more

10 Structural Improvements in Apache NiFi 2

NiFi Security Programming

2024-12-31 • 8 minute read • David Handermann

Apache NiFi 2.0.0 includes prominent new features such as Processors in native Python and a rebuilt user interface. The next major version also includes a number of notable albeit less visible improvements. These structural changes bring enhanced performance, maintainability, and security beyond earlier versions.

Read more