title: NiFi ListenHTTP processor: Uses an unsupported protocol
body: <p>I have configured a <strong>ListenHTTP</strong> 1.7.0 processor in NiFi 1.7.0-RC1. It is listening on a custom port behind a reverse proxy. I have configured a <strong>StandardRestrictedSSLContextService</strong> with a JKS keystore and have added the keystore password. We have not configured the truststore as we don't expect to need mutual TLS. The certificate is signed by an internal enterprise CA and is (or should be!) trusted by the client.</p>
  <p>When I test this with Chrome I receive the following:</p>
  <blockquote>
  <p>This site can’t provide a secure connection</p>
  <p><em>my.server</em> uses an unsupported protocol.</p>
  <p>ERR_SSL_VERSION_OR_CIPHER_MISMATCH</p>
  <p>Unsupported protocol</p>
  <p>The client and server don't support a common SSL protocol version or cipher suite.</p>
  </blockquote>
  <p><strong>Troubleshooting:</strong></p>
  <ul>
  <li>We have tried both <strong>TLS</strong> and <strong>TLSv1.2</strong> in the ListenHTTP processor.</li>
  <li>We have treid using <code>curl</code> (Linux) and <code>Invoke-WebRequest</code> (Windows) but have received variations on the bad cipher/SSL version message above.</li>
  <li>I don't see anything in the release notes suggesting that the ListenHTTP processor changed much since 1.7.0, so I'm assuming that I don't need to upgrade NiFi.</li>
  </ul>
  <p>Can anyone suggest what to try next or explain why we see this error?</p>
  <hr />
  <p>I have read the following:</p>
  <ul>
  <li><a href="https://www.simonellistonball.com/technology/nifi-ssl-listenhttp/" rel="nofollow noreferrer">https://www.simonellistonball.com/technology/nifi-ssl-listenhttp/</a></li>
  <li><a href="https://cwiki.apache.org/confluence/display/NIFI/Release+Notes" rel="nofollow noreferrer">https://cwiki.apache.org/confluence/display/NIFI/Release+Notes</a></li>
  <li><a href="https://stackoverflow.com/questions/62695524/nifi-how-to-make-listenhttp-work-with-ssl">Nifi: how to make ListenHTTP work with SSL</a></li>
  </ul>