Re: Update expired orderer org admin certificate and orderer certs #fabric #fabric-questions #fabric-orderer #signcerts


ramesh.bobbala1990@...
 

Hi Mattia and Chris,

Thank you for your suggestions. 
  1. update orderer admin certs first in system channel then in every other application channel
  2. update peer admin certs first in system channle then in every other application channel
  3. Update orderers
Even I will try to follow the same steps before adding new org in the network.
I have some doubts while updating both system channel update and application channel update.

Doubt 1: After changing orderer admin certs in system channel, shall I directly convert to pb format and run peer channel update with ordererMSP or shall I do all the update process like comparing delta between actual config and modified config, decoding to editable JSON format, Wrap in an envelope message and Convert it into the fully fledged protobuf format and then run peer channel update?

Doubt 2: Shall I update all the orderer admin certs and peer certs in system channel separately? Or can I do the update peer channel update at a time for both orderer admin certs and peer certs in system channel at once?
That means
1. change orderer admin certs and update system channel
2. change orderer admin certs and update application channel
3. change peer admin certs and update system channel
4. change peer admin certs and update application channel


As I need to do this on production environment, I want to do this process smoothly without any issues. 


Regards,
Ramesh.




Join fabric@lists.hyperledger.org to automatically receive all group messages.