Re: Starting Orderer: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config #hyperledger-fabric #fabric-orderer


Marek Malik <info@...>
 

Hi there,

If there would be anyone that could look in to the setup.
This is a part of the Kubernetes setup that I’m using to deploy on k8s cluster.

https://github.com/Marek00Malik/hyperledger-k8

 

The readme should describe how to start the cluster and what commands should be ran in given order.


Mauch appriciate for any help!

Marek

 

 

Od: Yacov Manevich <YACOVM@...>
Data: środa, 27 stycznia 2021 02:35
Do: Marek Malik <info@...>
DW: fabric <fabric@...>
Temat: RE: [Hyperledger Fabric] Starting Orderer: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config #hyperledger-fabric #fabric-orderer

 

I believe the OU enforcement is here https://github.com/hyperledger/fabric/blob/master/sampleconfig/msp/config.yaml#L11(Enable).



From:        "Marek Malik" <info@...>
To:        fabric <fabric@...>
Date:        01/27/2021 01:12 AM
Subject:        [EXTERNAL] Re: [Hyperledger Fabric] Starting Orderer: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config #hyperledger-fabric #fabric-orderer
Sent by:        fabric@...





Evening again, Again I’m asking for help with the ordere. I was...                                                                                                                                                                                      

This Message Is From an External Sender

This message came from outside your organization.


Evening again,

Again I’m asking for help with the ordere.
I was trying to understand the configbuilder.go file that identifies the NodeOUs and if the FabricNoOUs is enabled.

I’m using Fabric 2.2.1 release: https://github.com/hyperledger/fabric/blob/release-2.2/msp/configbuilder.go

At line:
https://github.com/hyperledger/fabric/blob/release-2.2/msp/configbuilder.go#L295
The nodeOUs is being loaded (I know it because the log ‘
Loading NodeOUs’ is printed.
I don’t have ‘
Specific certificate for %is not configured”  or neither “Failed loading %s certificate at [%s]: [%s]” in my logs, I would think that the file is pick up and read correctly. The only thing I’m struggling with is how and where this flag “msp.ouEnforcement” is set. It is the cause of the exception that is throwing the message (https://github.com/hyperledger/fabric/blob/release-2.2/msp/mspimplsetup.go#L190).
But I cannot find any place where this property of msp would be set, I also don’t see this being a the contents of any files either.

Can someone help with resolving my problem?
 

Again, the config.yaml is as follows:
NodeOUs:

  Enable: true
  ClientOUIdentifier:
    Certificate: cacerts/hlf-ca--amvoxdlt-7054-ca-AmvoxDLT.pem
    OrganizationalUnitIdentifier: client
  PeerOUIdentifier:
    Certificate: cacerts/hlf-ca--amvoxdlt-7054-ca-AmvoxDLT.pem
    OrganizationalUnitIdentifier: peer
  AdminOUIdentifier:
    Certificate: cacerts/hlf-ca--amvoxdlt-7054-ca-AmvoxDLT.pem
    OrganizationalUnitIdentifier: admin
  OrdererOUIdentifier:
    Certificate: cacerts/hlf-ca--amvoxdlt-7054-ca-AmvoxDLT.pem
    OrganizationalUnitIdentifier: orderer

 
Best Regards,
Marek Malik
 
Od: <fabric@...> w imieniu użytkownika Marek Malik <info@...>
Data:
wtorek, 26 stycznia 2021 00:40
Do:
wang dong <xdragon007@...>
DW:
fabric <fabric@...>
Temat:
Re: [Hyperledger Fabric] Starting Orderer: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config #hyperledger-fabric #fabric-orderer

 
Just a note,
This is the log from the orderer when starting it.

Could anyone help, give any idea ? I would really appreciate anyone giving any ideas.


2021-01-25 23:28:19.265 UTC [bccsp] GetDefault -> DEBU 0de Before using BCCSP, please call InitFactories(). Falling back to bootBCCSP.
2021-01-25 23:28:19.266 UTC [bccsp_sw] openKeyStore -> DEBU 0df KeyStore opened at [/var/hyperledger/orderer/msp/keystore]...done
2021-01-25 23:28:19.266 UTC [msp] getPemMaterialFromDir -> DEBU 0e0 Reading directory /var/hyperledger/orderer/msp/signcerts
2021-01-25 23:28:19.266 UTC [msp] getPemMaterialFromDir -> DEBU 0e1 Inspecting file /var/hyperledger/orderer/msp/signcerts/cert.pem
2021-01-25 23:28:19.266 UTC [msp] getPemMaterialFromDir -> DEBU 0e2 Reading directory /var/hyperledger/orderer/msp/cacerts
2021-01-25 23:28:19.267 UTC [msp] getPemMaterialFromDir -> DEBU 0e3 Inspecting file /var/hyperledger/orderer/msp/cacerts/hlf-ca--amvoxdlt-7054-ca-AmvoxDLT.pem
2021-01-25 23:28:19.267 UTC [msp] getPemMaterialFromDir -> DEBU 0e4 Reading directory /var/hyperledger/orderer/msp/admincerts
2021-01-25 23:28:19.267 UTC [msp] getPemMaterialFromDir -> DEBU 0e5 Reading directory /var/hyperledger/orderer/msp/intermediatecerts
2021-01-25 23:28:19.267 UTC [msp] getMspConfig -> DEBU 0e6 Intermediate certs folder not found at [/var/hyperledger/orderer/msp/intermediatecerts]. Skipping. [stat /var/hyperledger/orderer/msp/intermediatecerts: no such file or directory]
2021-01-25 23:28:19.267 UTC [msp] getPemMaterialFromDir -> DEBU 0e7 Reading directory /var/hyperledger/orderer/msp/tlscacerts
2021-01-25 23:28:19.267 UTC [msp] getPemMaterialFromDir -> DEBU 0e8 Inspecting file /var/hyperledger/orderer/msp/tlscacerts/hlf-ca--amvoxdlt-7054-ca-AmvoxDLT.pem
2021-01-25 23:28:19.268 UTC [msp] getPemMaterialFromDir -> DEBU 0e9 Reading directory /var/hyperledger/orderer/msp/tlsintermediatecerts
2021-01-25 23:28:19.268 UTC [msp] getMspConfig -> DEBU 0ea TLS intermediate certs folder not found at [/var/hyperledger/orderer/msp/tlsintermediatecerts]. Skipping. [stat /var/hyperledger/orderer/msp/tlsintermediatecerts: no such file or directory]
2021-01-25 23:28:19.268 UTC [msp] getPemMaterialFromDir -> DEBU 0eb Reading directory /var/hyperledger/orderer/msp/crls
2021-01-25 23:28:19.268 UTC [msp] getMspConfig -> DEBU 0ec crls folder not found at [/var/hyperledger/orderer/msp/crls]. Skipping. [stat /var/hyperledger/orderer/msp/crls: no such file or directory]
2021-01-25 23:28:19.268 UTC [msp] getMspConfig -> DEBU 0ed Loading NodeOUs
2021-01-25 23:28:19.270 UTC [msp] newBccspMsp -> DEBU 0ee Creating BCCSP-based MSP instance
2021-01-25 23:28:19.270 UTC [msp] Setup -> DEBU 0ef Setting up MSP instance AmvoxDLTMSP
2021-01-25 23:28:19.270 UTC [msp.identity] newIdentity -> DEBU 0f0 Creating identity instance for cert -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-01-25 23:28:19.270 UTC [msp.identity] newIdentity -> DEBU 0f1 Creating identity instance for cert -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-01-25 23:28:19.281 UTC [bccsp_sw] loadPrivateKey -> DEBU 0f2 Loading private key [4f147b918b9c2596e091bbfe6a82b7a502912056e4e79ee782d308b65deb67cc] at [/var/hyperledger/orderer/msp/keystore/4f147b918b9c2596e091bbfe6a82b7a502912056e4e79ee782d308b65deb67cc_sk]...
2021-01-25 23:28:19.282 UTC [msp.identity] newIdentity -> DEBU 0f3 Creating identity instance for cert -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-01-25 23:28:19.282 UTC [msp] setupSigningIdentity -> DEBU 0f4 Signing identity expires at 2022-01-25 23:26:00 +0000 UTC
2021-01-25 23:28:19.283 UTC [msp] GetDefaultSigningIdentity -> DEBU 0f5 Obtaining default signing identity
2021-01-25 23:28:19.285 UTC [orderer.common.server] initializeServerConfig -> INFO 0f6 Starting orderer with TLS enabled
2021-01-25 23:28:19.285 UTC [orderer.common.server] createLedgerFactory -> DEBU 0f7 Ledger dir: /var/hyperledger/production/orderer
2021-01-25 23:28:19.285 UTC [kvledger.util] CreateDirIfMissing -> DEBU 0f8 CreateDirIfMissing [/var/hyperledger/production/orderer/index/]
2021-01-25 23:28:19.285 UTC [kvledger.util] logDirStatus -> DEBU 0f9 Before creating dir - [/var/hyperledger/production/orderer/index/] exists
2021-01-25 23:28:19.286 UTC [kvledger.util] logDirStatus -> DEBU 0fa After creating dir - [/var/hyperledger/production/orderer/index/] exists
2021-01-25 23:28:19.292 UTC [leveldbhelper] openDBAndCheckFormat -> DEBU 0fb Checking for db format at path [/var/hyperledger/production/orderer/index]
2021-01-25 23:28:19.292 UTC [leveldbhelper] openDBAndCheckFormat -> DEBU 0fc format is latest, nothing to do
2021-01-25 23:28:19.293 UTC [common.channelconfig] NewStandardValues -> DEBU 0fd Initializing protos for *channelconfig.ChannelProtos
2021-01-25 23:28:19.293 UTC [common.channelconfig] initializeProtosStruct -> DEBU 0fe Processing field: HashingAlgorithm
2021-01-25 23:28:19.293 UTC [common.channelconfig] initializeProtosStruct -> DEBU 0ff Processing field: BlockDataHashingStructure
2021-01-25 23:28:19.293 UTC [common.channelconfig] initializeProtosStruct -> DEBU 100 Processing field: OrdererAddresses
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 101 Processing field: Consortium
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 102 Processing field: Capabilities
2021-01-25 23:28:19.294 UTC [common.channelconfig] NewStandardValues -> DEBU 103 Initializing protos for *channelconfig.OrdererProtos
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 104 Processing field: ConsensusType
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 105 Processing field: BatchSize
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 106 Processing field: BatchTimeout
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 107 Processing field: KafkaBrokers
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 108 Processing field: ChannelRestrictions
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 109 Processing field: Capabilities
2021-01-25 23:28:19.294 UTC [common.channelconfig] NewStandardValues -> DEBU 10a Initializing protos for *channelconfig.OrdererOrgProtos
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 10b Processing field: Endpoints
2021-01-25 23:28:19.294 UTC [common.channelconfig] NewStandardValues -> DEBU 10c Initializing protos for *channelconfig.OrganizationProtos
2021-01-25 23:28:19.294 UTC [common.channelconfig] initializeProtosStruct -> DEBU 10d Processing field: MSP
2021-01-25 23:28:19.294 UTC [common.channelconfig] validateMSP -> DEBU 10e Setting up MSP for org AmvoxDLTMSP
2021-01-25 23:28:19.294 UTC [msp] newBccspMsp -> DEBU 10f Creating BCCSP-based MSP instance
2021-01-25 23:28:19.294 UTC [msp] New -> DEBU 110 Creating Cache-MSP instance
2021-01-25 23:28:19.294 UTC [msp] Setup -> DEBU 111 Setting up MSP instance AmvoxDLTMSP
2021-01-25 23:28:19.294 UTC [msp.identity] newIdentity -> DEBU 112 Creating identity instance for cert -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2021-01-25 23:28:19.294 UTC [orderer.common.server] Main -> PANI 113 Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config: setting up the MSP manager failed: administrators must be declared when no admin ou classification is set
panic: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config: setting up the MSP manager failed: administrators must be declared when no admin ou classification is set
 
goroutine 1 [running]:
go.uber.org/zap/zapcore.(*CheckedEntry).Write(0xc0000d73f0, 0x0, 0x0, 0x0)
        /go/src/github.com/hyperledger/fabric/vendor/go.uber.org/zap/zapcore/entry.go:230 +0x545
go.uber.org/zap.(*SugaredLogger).log(0xc0000102e8, 0x11aff04, 0x1025645, 0x25, 0xc0001a98e8, 0x1, 0x1, 0x0, 0x0, 0x0)
        /go/src/github.com/hyperledger/fabric/vendor/go.uber.org/zap/sugar.go:234 +0x100
go.uber.org/zap.(*SugaredLogger).Panicf(...)
        /go/src/github.com/hyperledger/fabric/vendor/go.uber.org/zap/sugar.go:159
github.com/hyperledger/fabric/common/flogging.(*FabricLogger).Panicf(...)
        /go/src/github.com/hyperledger/fabric/common/flogging/zap.go:74
github.com/hyperledger/fabric/orderer/common/server.Main()
        /go/src/github.com/hyperledger/fabric/orderer/common/server/main.go:118 +0x1c83
main.main()
        /go/src/github.com/hyperledger/fabric/cmd/orderer/main.go:15 +0x20
 
 
Best Regards,
Marek Malik
 
Od: <fabric@...> w imieniu użytkownika Marek Malik <info@...>
Data:
poniedziałek, 25 stycznia 2021 23:02
Do:
wang dong <xdragon007@...>
DW:
fabric <fabric@...>
Temat:
Re: [Hyperledger Fabric] Starting Orderer: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config #hyperledger-fabric #fabric-orderer

 
Thank you Wang,

But as I mentioned, I already have a config.yaml file in the msp folder. The cert that is referenced in that file exists.
Any other idea?

 
 
Best Regards,
Marek Malik
 
Od: wang dong <xdragon007@...>
Data:
poniedziałek, 25 stycznia 2021 08:14
Do:
Marek Malik <info@...>
DW:
fabric <fabric@...>
Temat:
Re: [Hyperledger Fabric] Starting Orderer: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config #hyperledger-fabric #fabric-orderer

 
Hi Marek,
 
You can find the solution here. https://github.com/hyperledger/fabric/blob/master/docs/source/deployorderer/ordererdeploy.md#when-you-start-the-orderer-it-fails-with-the-following-error-1
 



Join fabric@lists.hyperledger.org to automatically receive all group messages.