<extensionManifest><groupId>org.apache.nifi</groupId><artifactId>nifi-ssl-context-service-nar</artifactId><version>1.28.0.250-eep-1001</version><parentNar><groupId>org.apache.nifi</groupId><artifactId>nifi-standard-services-api-nar</artifactId><version>1.28.0.250-eep-1001</version></parentNar><systemApiVersion>1.28.0.250-eep-1001</systemApiVersion><buildInfo><tag>nifi-1.28.0-RC1</tag><branch>UNKNOWN</branch><revision>bdae0d7</revision></buildInfo><extensions><extension><name>org.apache.nifi.ssl.StandardRestrictedSSLContextService</name><type>CONTROLLER_SERVICE</type><description>Restricted implementation of the SSLContextService. Provides the ability to configure keystore and/or truststore properties once and reuse that configuration throughout the application, but only allows a restricted set of TLS/SSL protocols to be chosen (no SSL protocols are supported). The set of protocols selectable will evolve over time as new protocols emerge and older protocols are deprecated. This service is recommended over StandardSSLContextService if a component doesn't expect to communicate with legacy systems since it is unlikely that legacy systems will support these protocols.</description><tags><tag>tls</tag><tag>ssl</tag><tag>secure</tag><tag>certificate</tag><tag>keystore</tag><tag>truststore</tag><tag>jks</tag><tag>p12</tag><tag>pkcs12</tag><tag>pkcs</tag></tags><properties><property><name>Keystore Filename</name><displayName>Keystore Filename</displayName><description>The fully-qualified filename of the Keystore</description><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>true</expressionLanguageSupported><expressionLanguageScope>VARIABLE_REGISTRY</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic><resourceDefinition><cardinality>SINGLE</cardinality><resourceTypes><resourceType>FILE</resourceType></resourceTypes></resourceDefinition></property><property><name>Keystore Password</name><displayName>Keystore Password</displayName><description>The password for the Keystore</description><required>false</required><sensitive>true</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>key-password</name><displayName>Key Password</displayName><description>The password for the key. If this is not specified, but the Keystore Filename, Password, and Type are specified, then the Keystore Password will be assumed to be the same as the Key Password.</description><required>false</required><sensitive>true</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>Keystore Type</name><displayName>Keystore Type</displayName><description>The Type of the Keystore</description><allowableValues><allowableValue><displayName>BCFKS</displayName><value>BCFKS</value><description></description></allowableValue><allowableValue><displayName>PKCS12</displayName><value>PKCS12</value><description></description></allowableValue><allowableValue><displayName>JKS</displayName><value>JKS</value><description></description></allowableValue></allowableValues><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>Truststore Filename</name><displayName>Truststore Filename</displayName><description>The fully-qualified filename of the Truststore</description><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>true</expressionLanguageSupported><expressionLanguageScope>VARIABLE_REGISTRY</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic><resourceDefinition><cardinality>SINGLE</cardinality><resourceTypes><resourceType>FILE</resourceType></resourceTypes></resourceDefinition></property><property><name>Truststore Password</name><displayName>Truststore Password</displayName><description>The password for the Truststore</description><required>false</required><sensitive>true</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>Truststore Type</name><displayName>Truststore Type</displayName><description>The Type of the Truststore</description><allowableValues><allowableValue><displayName>BCFKS</displayName><value>BCFKS</value><description></description></allowableValue><allowableValue><displayName>PKCS12</displayName><value>PKCS12</value><description></description></allowableValue><allowableValue><displayName>JKS</displayName><value>JKS</value><description></description></allowableValue></allowableValues><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>SSL Protocol</name><displayName>TLS Protocol</displayName><description>TLS Protocol Version for encrypted connections. Supported versions depend on the specific version of Java used.</description><defaultValue>TLS</defaultValue><allowableValues><allowableValue><displayName>TLS</displayName><value>TLS</value><description>Negotiate latest protocol version based on platform supported versions</description></allowableValue><allowableValue><displayName>TLSv1.3</displayName><value>TLSv1.3</value><description>Require TLSv1.3 protocol version</description></allowableValue><allowableValue><displayName>TLSv1.2</displayName><value>TLSv1.2</value><description>Require TLSv1.2 protocol version</description></allowableValue></allowableValues><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property></properties><providedServiceAPIs><providedServiceAPI><className>org.apache.nifi.ssl.SSLContextService</className><groupId>org.apache.nifi</groupId><artifactId>nifi-standard-services-api-nar</artifactId><version>1.28.0.250-eep-1001</version></providedServiceAPI><providedServiceAPI><className>org.apache.nifi.ssl.RestrictedSSLContextService</className><groupId>org.apache.nifi</groupId><artifactId>nifi-standard-services-api-nar</artifactId><version>1.28.0.250-eep-1001</version></providedServiceAPI></providedServiceAPIs></extension><extension><name>org.apache.nifi.ssl.StandardSSLContextService</name><type>CONTROLLER_SERVICE</type><description>Standard implementation of the SSLContextService. Provides the ability to configure keystore and/or truststore properties once and reuse that configuration throughout the application. This service can be used to communicate with both legacy and modern systems. If you only need to communicate with non-legacy systems, then the StandardRestrictedSSLContextService is recommended as it only allows a specific set of SSL protocols to be chosen.</description><tags><tag>ssl</tag><tag>secure</tag><tag>certificate</tag><tag>keystore</tag><tag>truststore</tag><tag>jks</tag><tag>p12</tag><tag>pkcs12</tag><tag>pkcs</tag><tag>tls</tag></tags><properties><property><name>Keystore Filename</name><displayName>Keystore Filename</displayName><description>The fully-qualified filename of the Keystore</description><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>true</expressionLanguageSupported><expressionLanguageScope>VARIABLE_REGISTRY</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic><resourceDefinition><cardinality>SINGLE</cardinality><resourceTypes><resourceType>FILE</resourceType></resourceTypes></resourceDefinition></property><property><name>Keystore Password</name><displayName>Keystore Password</displayName><description>The password for the Keystore</description><required>false</required><sensitive>true</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>key-password</name><displayName>Key Password</displayName><description>The password for the key. If this is not specified, but the Keystore Filename, Password, and Type are specified, then the Keystore Password will be assumed to be the same as the Key Password.</description><required>false</required><sensitive>true</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>Keystore Type</name><displayName>Keystore Type</displayName><description>The Type of the Keystore</description><allowableValues><allowableValue><displayName>BCFKS</displayName><value>BCFKS</value><description></description></allowableValue><allowableValue><displayName>PKCS12</displayName><value>PKCS12</value><description></description></allowableValue><allowableValue><displayName>JKS</displayName><value>JKS</value><description></description></allowableValue></allowableValues><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>Truststore Filename</name><displayName>Truststore Filename</displayName><description>The fully-qualified filename of the Truststore</description><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>true</expressionLanguageSupported><expressionLanguageScope>VARIABLE_REGISTRY</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic><resourceDefinition><cardinality>SINGLE</cardinality><resourceTypes><resourceType>FILE</resourceType></resourceTypes></resourceDefinition></property><property><name>Truststore Password</name><displayName>Truststore Password</displayName><description>The password for the Truststore</description><required>false</required><sensitive>true</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>Truststore Type</name><displayName>Truststore Type</displayName><description>The Type of the Truststore</description><allowableValues><allowableValue><displayName>BCFKS</displayName><value>BCFKS</value><description></description></allowableValue><allowableValue><displayName>PKCS12</displayName><value>PKCS12</value><description></description></allowableValue><allowableValue><displayName>JKS</displayName><value>JKS</value><description></description></allowableValue></allowableValues><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property><property><name>SSL Protocol</name><displayName>TLS Protocol</displayName><description>SSL or TLS Protocol Version for encrypted connections. Supported versions include insecure legacy options and depend on the specific version of Java used.</description><defaultValue>TLS</defaultValue><allowableValues><allowableValue><displayName>SSL</displayName><value>SSL</value><description>Negotiate latest SSL or TLS protocol version based on platform supported versions</description></allowableValue><allowableValue><displayName>TLS</displayName><value>TLS</value><description>Negotiate latest TLS protocol version based on platform supported versions</description></allowableValue><allowableValue><displayName>TLSv1.3</displayName><value>TLSv1.3</value><description>Require TLSv1.3 protocol version</description></allowableValue><allowableValue><displayName>TLSv1.2</displayName><value>TLSv1.2</value><description>Require TLSv1.2 protocol version</description></allowableValue><allowableValue><displayName>TLSv1.1</displayName><value>TLSv1.1</value><description>Require TLSv1.1 protocol version</description></allowableValue><allowableValue><displayName>TLSv1</displayName><value>TLSv1</value><description>Require TLSv1 protocol version</description></allowableValue></allowableValues><required>false</required><sensitive>false</sensitive><expressionLanguageSupported>false</expressionLanguageSupported><expressionLanguageScope>NONE</expressionLanguageScope><dynamicallyModifiesClasspath>false</dynamicallyModifiesClasspath><dynamic>false</dynamic></property></properties><providedServiceAPIs><providedServiceAPI><className>org.apache.nifi.ssl.SSLContextService</className><groupId>org.apache.nifi</groupId><artifactId>nifi-standard-services-api-nar</artifactId><version>1.28.0.250-eep-1001</version></providedServiceAPI></providedServiceAPIs></extension></extensions></extensionManifest>