Skip to content

Commit a72b3ca

Browse files
committed
Include documentation about what each property does
1 parent 255dcdf commit a72b3ca

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

docs/modules/nifi/pages/troubleshooting/index.adoc

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -84,8 +84,12 @@ nodes:
8484
nifi.web.https.sni.host.check: "false"
8585
----
8686

87-
WARNING: Disabling SNI validation reduces security by allowing connections with mismatched hostnames.
88-
Only use this workaround when proper certificate configuration is not feasible.
87+
These properties control NiFi's SNI validation behavior:
88+
89+
* `nifi.web.https.sni.required`: When `true`, NiFi requires that HTTPS requests include an SNI certificate. Setting to `false` allows connections without SNI certificates.
90+
* `nifi.web.https.sni.host.check`: When `true`, NiFi validates that the SNI certificate's hostname matches the incoming request's hostname. Setting to `false` disables this hostname matching check.
91+
92+
WARNING: Disabling SNI validation reduces security by allowing connections with mismatched hostnames. Only use this workaround when proper certificate configuration is not feasible.
8993

9094
== `authorization_request_not_found` when using multiple NiFi nodes
9195

0 commit comments

Comments
 (0)