Abhijeet,

 

Certificate Authorities --- specifically, the Fabric CA --- should be used to create all of the certificates in a production scenario (it is a best practice tp stand up one CA for each organization and the organization's related identities, MSP, and nodes).

 

Consult the Fabric CA User's Guide for more information: https://hyperledger-fabric-ca.readthedocs.io/en/latest/

 

Regards,

 

Joe Alewine

IBM Blockchain, Raleigh

 

rocket chat: joe-alewine

slack: joe.alewine

 

 

 

----- Original message -----
From: "Nye Liu" <nye@...>
Sent by: fabric@...
To: fabric@...
Cc:
Subject: [EXTERNAL] Re: [Hyperledger Fabric] Alternative of cryptogen for Prod
Date: Sun, Nov 3, 2019 7:43 AM
 

It is described in the Operations Guide.

On 11/3/2019 1:11 AM, Abhijeet Bhowmik wrote:

Hey,

 

Just to be specific, I was referring to the certificates that we set up at peers and place public keys at orderer. From where do we obtain that folder structure (MSP and TLS)?

 

Thanks and Regards

Abhijeet Bhowmik

 

On Sun, Nov 3, 2019 at 10:44 AM Mrudav Shukla <mrudavshukla@...> wrote:

Hi Abhijeet,

 

For prod, you’ll need to generate certs from CAs. References:

 

https://hyperledger-fabric-ca.readthedocs.io/en/release-1.4/operations_guide.html

Cheers,

Mrudav 

 

On Sun, 3 Nov 2019 at 10:22 AM, Abhijeet Bhowmik <abhijeet@...> wrote:

Greetings Everyone,

 

I am dwelling in the answer of the question: "If not cryptogen in Prod, then what and how?".

Right now, generating org certificates is a pretty straightforward task while getting started with HLF. But after reading the docs, the question has been thrown upon me that how can we configure certificates in Prod. I know it's a naive question to ask but being a beginner and stepping my first foot into actually hosting fabric application, I am obliged to ask the community to help me out.

 

 

Thanks and Regards

Abhijeet Bhowmik