Re: Update org's admin certificate in channel config #channel #configtxgen #fabric-peer #fabric-questions #fabric-orderer


chris.elder@...
 

The orderers need to be configured to allow the expired admin certificate to be used to sign the change to the channel configuration.
 
This can be accomplished by overriding the orderers to allow expired certificates to be used:
https://hyperledger-fabric.readthedocs.io/en/release-2.2/raft_configuration.html?highlight=noexpirationchecks#certificate-expiration-related-authentication
 
Set the NoExpirationChecks for each orderer in the orderer.yaml and restart.
 
Construct a channel update with the new admin certificates.
 
Update the channel using the expired certificate to sign the update.
 
Remove the orderride in the orderers and restart.

Join fabric@lists.hyperledger.org to automatically receive all group messages.