|
CA Keys
Trevor Lee Oakley <trevor@...>
If keys are generated by the CA then what is the best way to distribute these keys?
Thanks
Trevor
|
|
|
|
Regarding Fabric Raft Ordering Service
#raft
#tsc-project-update
I'm able to create the channel. But while joining the channel, I'm getting the error given below:
[2019-10-24 09:34:38.049] [DEBUG] Join-Channel - Join Channel R E S P O N S E : [ [ { "status": 500, "payload": { "type": "Buffer", "data": [] }, "peer": { "url": "grpcs://104.211.89.242:51018", "name": "oodjaeuen108-peer0.swap.com", "options": { "grpc.max_receive_message_length": -1, "grpc.max_send_message_length": -1, "grpc.keepalive_time_ms": 120000, "grpc.http2.min_time_between_pings_ms": 120000, "grpc.keepalive_timeout_ms": 20000, "grpc.http2.max_pings_without_data": 0, "grpc.keepalive_permit_without_calls": 1, "name": "oodjaeuen108-peer0.swap.com", "grpc.ssl_target_name_override": "oodjaeuen108-peer0.swap.com", "grpc.default_authority": "oodjaeuen108-peer0.swap.com" } }, "isProposalResponse": true } ] ] [2019-10-24 09:34:38.050] [ERROR] Join-Channel - Failed to joined peer to the channel swapchannel [2019-10-24 09:34:38.050] [ERROR] Join-Channel - Failed to join all peers to channel. cause:Failed to joined peer to the channel swapchannel And the peer logs: 2019-10-24 09:34:38.045 UTC [endorser] callChaincode -> INFO 022 [][b8e9f45a] Entry chaincode: name:"cscc" 2019-10-24 09:34:38.048 UTC [endorser] callChaincode -> INFO 023 [][b8e9f45a] Exit chaincode: name:"cscc" (2ms) 2019-10-24 09:34:38.048 UTC [endorser] ProcessProposal -> ERRO 024 [][b8e9f45a] simulateProposal() resulted in chaincode name:"cscc" response status 500 for txid: b8e9f45ab01d86a76e9f6427ec0da4fb2dc940e4f6b060a0c49c294a32efcb73 2019-10-24 09:34:38.048 UTC [comm.grpc.server] 1 -> INFO 025 unary call completed grpc.service=protos.Endorser grpc.method=ProcessProposal grpc.peer_address=104.211.89.242:48362 grpc.code=OK grpc.call_duration=4.193058ms PFA for all the configuration file along with genesis.block and channel.tx
|
|
|
|
Re: Persisting world state
Mr.Phuwanai Thummavet
toggle quoted messageShow quoted text
On Mon, Oct 28, 2019 at 11:27 PM Abhijeet Bhowmik <abhijeet@...> wrote:
--
Best Regards, Phuwanai Thummavet Blockchain Architect and Full-Stack Developer
|
|
|
|
Re: Persisting world state
https://hyperledger-fabric.readthedocs.io/en/release-1.4/gossip.html Ben Taylor, CEO LedgerDomain 212.332.4466
On Mon, Oct 28, 2019 at 9:27 AM Abhijeet Bhowmik <abhijeet@...> wrote:
|
|
|
|
Persisting world state
Abhijeet Bhowmik <abhijeet@...>
Hello Everyone, I have some confusions regarding how state ledgers are persisted across multiple ledgers. I have an intuition that every org's peers have a copy of the ledger from where they generate read set and write set and also validate commitment of transactions to ledger. My big confusion is, who has the master copy. I mean what if one complete non endorsing peer was down for sometime and then it rejoins, from where does it syncs it's ledger since a lot must have happened in the block chain since it's shut down. Thanks and Regards Abhijeet Bhomwik
|
|
|
|
Next Hyperledger Fabric Application Developer Community call - Thursday Oct 31st @ 4pm UTC (4pm UK, 11am ET, 8am PT)
Paul O'Mahoney <mahoney@...>
dear Fabric Application
Developer,
the next Fabric Application Developer community call is scheduled for this Thursday Oct 31st @ 4pm UTC (4pm UK, 11am ET, 8am PT) . It lasts approx 30-60 mins FYI. Note: it is now begins one hour earlier. The agenda will be posted here -> https://wiki.hyperledger.org/display/fabric/Meeting+Agendas%3A+Fabric+Application+Developer+Community+Call This community call is held bi-weekly via Zoom webconference and is aimed at : -
helping the worldwide Hyperledger Fabric Application Developer community
grow in their development journey (eg. developing applications, smart contracts,
chaincode, developing clients, using the SDK, tutorials/demos etc - eg.
whether its NodeJS, Java, Go etc etc) If
you wish to share content on a call, just let me know via email direct
or DM me on Rocketchat (ID: mahoney1) and I'll put an item on the agenda.
Provide the following: The Zoom webconference ID is https://zoom.us/my/hyperledger.community More information can be found on the community page -> https://wiki.hyperledger.org/display/fabric/Fabric+Application+Developer+Community+Calls You can get calendar invites (eg iCal) here many thanks for your time - feel free to forward this email if you think it is of interest to a colleague. Paul O'Mahony Community Lead - Hyperledger Fabric Developer Community RocketChat: mahoney1 mahoney@... Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU
|
|
|
|
Re: Hyperledger Fabric release v2.0 update
Xiang Dong Hu <huxd@...>
Hi Dave,
One quick question, does the support for " external chaincode " include support to run chaincode as a remote grpc server?
Hu Xiang Dong (胡香冬)
IBM Blockchain Platform development China Systems Lab Email: huxd@...
----- Original message -----
|
|
|
|
Re: Major security hole in Hyperledger Fabric - Private Data is not private
#fabric-chaincode
#ssl
#fabric
#fabric-questions
#fabric-dstorage
Ivan Ch <acizlan@...>
Hi jeroiraz
Oct:
:In the example above, if peers do not have a way to validate your national ID, peers may never claim the provided or stored data is valid. This scenario is not limited to HF or Blockchain but to any procedurethere are actually quite a few ways to validate anything including national ID using ZKP or ZKP like technique (e.g. I can design my crypto to validate if the two text data encrypted by different keys are actually the same text), but you can't do anything with hashes Dave, Jay. The chaincode can require that the transaction submitter include the private data in the transient field when invoking the chaincode. Any party that endorses the chaincode execution will have the private data, and it will also be disseminated to all other collection members. If the transaction submitter does not provide the private data at chaincode invocation time, they will not be able to gather sufficient endorsements, and the transaction will not be validated.as you said "Any party that endorses the chaincode execution will have the private data". here is the dilemma , you either make the private data known (whoever can endorse it must know your data), or allow adversaries to take advantage of it and trick others with unverifiable blockchain data. sure, this is not a fabric problem but a methodology problem, but fabric makes it a feature for people no-so-educated-on-security to use it and use it wrong.
|
|
|
|
Re: failed to invoke chaincode name:"lscc" , error: container exited with 254
#fabric-chaincode
#fabric-questions
Nicholas Leonardi
Hey, I've had this problem before. What I did to solve it and seems bizarre is I created a new file and just simply copied and pasted the entire chaincode to the new file and used that.
Em domingo, 27 de outubro de 2019 10:26:04 BRT, praviteja@... <praviteja@...> escreveu:
I am writing a chaincode in Typescript and trying to deploy on to a Custom Network with an orderer, one Peer with Couch DB and a CA. When i deploy the chaincode on to the peer , the following message appears.  When the same chaincode is run in fabcar example instantiates with no issues .
|
|
|
|
failed to invoke chaincode name:"lscc" , error: container exited with 254
#fabric-chaincode
#fabric-questions
praviteja@...
I am writing a chaincode in Typescript and trying to deploy on to a Custom Network with an orderer, one Peer with Couch DB and a CA.
When i deploy the chaincode on to the peer , the following message appears.  When the same chaincode is run in fabcar example instantiates with no issues .
|
|
|
|
Re: Not able to find Go in fabric-orderer container
Alexandre Pauwels
Hey Siddharth, If you're trying to debug the peer binary, I would recommend eschewing the docker containers entirely and just running the peer binary directly on your computer, and using the standard methods for using gdb to debug go. Alex
On Fri, Oct 25, 2019 at 4:32 PM Siddharth Jain <siddjain@...> wrote:
|
|
|
|
Re: Not able to find Go in fabric-orderer container
Siddharth Jain
Go does exist in the parent docker image of the orderer i.e., hyperledger/fabric-baseimage
root@2c068c753e05:/# find . -name go
./opt/go
./opt/go/bin/go
./opt/go/misc/tour/static/lib/codemirror/mode/go
./opt/go/pkg/linux_amd64/go
./opt/go/pkg/linux_amd64_race/go
./opt/go/src/cmd/go
./opt/go/src/go
and I don't see any code in the
Dockerfile of the orderer where it is removed (uninstalled)
From: Nye Liu <nye@...>
Sent: Friday, October 25, 2019 2:10 PM To: Siddharth Jain <siddjain@...> Cc: fabric@... <fabric@...> Subject: Re: [Hyperledger Fabric] Not able to find Go in fabric-orderer container The go binary is not needed in that container, it is only needed to build it.
You misapprehend what the go image is used for.
On 10/25/2019 2:01 PM, Siddharth Jain wrote:
|
|
|
|
Re: Not able to find Go in fabric-orderer container
Nye Liu <nye@...>
The go binary is not needed in that container, it is only needed to build it.
You misapprehend what the go image is used for.
On 10/25/2019 2:01 PM, Siddharth Jain
wrote:
|
|
|
|
Re: Not able to find Go in fabric-orderer container
Siddharth Jain
root@c754367ff2ba:/home# go
bash: go: command not found
root@c754367ff2ba:/home# ls /usr/bin/go
ls: cannot access '/usr/bin/go': No such file or directory
root@c754367ff2ba:/home# ls /usr/local/bin/go
ls: cannot access '/usr/local/bin/go': No such file or directory
root@c754367ff2ba:/home# ls /usr/lib/go*
ls: cannot access '/usr/lib/go*': No such file or directory
root@c754367ff2ba:/home# ls /usr/lib
apt gcc locale os-release ssl tmpfiles.d
binfmt.d gnupg mime python2.7 systemd x86_64-linux-gnu
dpkg insserv modules-load.d python3 tar
its just not there!
From: Nye Liu <nye@...>
Sent: Friday, October 25, 2019 1:46 PM To: Siddharth Jain <siddjain@...> Cc: fabric@... <fabric@...> Subject: Re: [Hyperledger Fabric] Not able to find Go in fabric-orderer container /usr/bin/go, /usr/local/bin/go, and /usr/lib/go-x.xx/bin/go are all more likely than /usr/local/go
On Fri, Oct 25, 2019, 1:32 PM Siddharth Jain <siddjain@...> wrote:
|
|
|
|
Re: Not able to find Go in fabric-orderer container
Nye Liu <nye@...>
/usr/bin/go, /usr/local/bin/go, and /usr/lib/go-x.xx/bin/go are all more likely than /usr/local/go
On Fri, Oct 25, 2019, 1:32 PM Siddharth Jain <siddjain@...> wrote:
|
|
|
|
Not able to find Go in fabric-orderer container
Siddharth Jain
I logged into a fabric-orderer:1.4.3 container and cannot find Go in it.
root@c754367ff2ba:/home# echo $GOPATH
root@c754367ff2ba:/home# ls /go
ls: cannot access '/go': No such file or directory
ls: cannot access '/usr/local/go': No such file or directory
root@c754367ff2ba:/home# ls /opt/gopath
ls: cannot access '/opt/gopath': No such file or directory
I checked the Dockerfile and looks like fabric-orderer is derived from a Go image. Then why is Go missing in it?! What happened!
|
|
|
|
Re: Second Channel
Gari Singh <garis@...>
Unfortunately, the CLI for both the peer and the orderer is actually the same peer CLI. "peer channel join" talks to the peer whereas "peer channel create" talks to the orderer. Not my favorite thing ... we play to address in a future release.
To answer your question ... if you followed the standard tutorial / setup stuff, you likely ended up with "testchainid" as the system channel. And yes ... you would need to follow the channel update path except you would add a consortium versus adding an org to a consortium. ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-846-7499 garis@... ----------------------------------------- -----fabric@... wrote: ----- To: Gari Singh <garis@...> From: "White, Spencer (S.)" Sent by: fabric@... Date: 10/25/2019 10:09AM Cc: "fabric@..." <fabric@...> Subject: [EXTERNAL] Re: [Hyperledger Fabric] Second Channel Is the system channel always the first channel that you create/define? And this would mean I need to follow a similar path as the adding org to existing channel i.e. getting the channel config, adding yaml file with new consortium definition, creating protobuf, signing and then running peer channel update? It seems weird to run peer channel update in a channel so I can create another channel with a consortium separate from it. Spencer From: Gari Singh <garis@...> Sent: Friday, October 25, 2019 9:58 AM To: White, Spencer (S.) <swhit210@...> Cc: fabric@... <fabric@...> Subject: RE: [Hyperledger Fabric] Second Channel Ah ... so in that case you will first need to update the system channel with the new consortium definition prior to trying to create channel for that consortium. ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-846-7499 garis@... ----------------------------------------- -----"White, Spencer (S.)" <swhit210@...> wrote: ----- To: Gari Singh <garis@...> From: "White, Spencer (S.)" <swhit210@...> Date: 10/25/2019 09:26AM Cc: "fabric@..." <fabric@...> Subject: [EXTERNAL] Re: [Hyperledger Fabric] Second Channel It is definitely not. I am attempting to create a second channel with a different consortium in a network that has already been spun up with a channel and consortium. Spencer From: Gari Singh <garis@...> Sent: Friday, October 25, 2019 5:49 AM To: White, Spencer (S.) <swhit210@...> Cc: fabric@... <fabric@...> Subject: RE: [Hyperledger Fabric] Second Channel Are you sure that "LoanchainConsortium" is actually the consortium name you used when you originally spun up the network? ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-846-7499 garis@... ----------------------------------------- -----fabric@... wrote: ----- To: "fabric@..." <fabric@...> From: "White, Spencer (S.)" Sent by: fabric@... Date: 10/24/2019 02:05PM Subject: [EXTERNAL] Re: [Hyperledger Fabric] Second Channel My apologies, the below error: Error: got unexpected status: BAD_REQUEST -- Unknown consortium name: LoanchainConsortium Spencer From: White, Spencer (S.) Sent: Thursday, October 24, 2019 1:57 PM To: fabric@... <fabric@...> Subject: Second Channel Hello, I am attempting to create a second channel after my test network has already been up and running for awhile. Is it possible to do this? I am encountering the below error and the few comments available suggest spinning my network down and removing volumes. I would prefer to avoid that if possible. Error: got unexpected status: BAD_REQUEST -- Unknown consortium name: LoanchainConsortium Sincerely, Spencer
|
|
|
|
Re: Second Channel
Nye Liu <nye@...>
The system channel is on the orderer, not the peers.
On 10/25/2019 7:09 AM, White, Spencer
(S.) wrote:
|
|
|
|
Re: Second Channel
White, Spencer (S.)
Is the system channel always the first channel that you create/define? And this would mean I need to follow a similar path as the adding org to existing channel i.e. getting the channel config, adding yaml file with new consortium definition, creating protobuf,
signing and then running peer channel update? It seems weird to run peer channel update in a channel so I can create another channel with a consortium separate from it.
Spencer
From: Gari Singh <garis@...>
Sent: Friday, October 25, 2019 9:58 AM To: White, Spencer (S.) <swhit210@...> Cc: fabric@... <fabric@...> Subject: RE: [Hyperledger Fabric] Second Channel Ah ... so in that case you will first need to update the system channel with the new consortium definition prior to trying to create channel for that consortium.
----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-846-7499 garis@... ----------------------------------------- -----"White, Spencer (S.)" <swhit210@...> wrote: ----- To: Gari Singh <garis@...> From: "White, Spencer (S.)" <swhit210@...> Date: 10/25/2019 09:26AM Cc: "fabric@..." <fabric@...> Subject: [EXTERNAL] Re: [Hyperledger Fabric] Second Channel It is definitely not. I am attempting to create a second channel with a different consortium in a network that has already been spun up with a channel and consortium. Spencer From: Gari Singh <garis@...> Sent: Friday, October 25, 2019 5:49 AM To: White, Spencer (S.) <swhit210@...> Cc: fabric@... <fabric@...> Subject: RE: [Hyperledger Fabric] Second Channel Are you sure that "LoanchainConsortium" is actually the consortium name you used when you originally spun up the network? ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-846-7499 garis@... ----------------------------------------- -----fabric@... wrote: ----- To: "fabric@..." <fabric@...> From: "White, Spencer (S.)" Sent by: fabric@... Date: 10/24/2019 02:05PM Subject: [EXTERNAL] Re: [Hyperledger Fabric] Second Channel My apologies, the below error: Error: got unexpected status: BAD_REQUEST -- Unknown consortium name: LoanchainConsortium Spencer From: White, Spencer (S.) Sent: Thursday, October 24, 2019 1:57 PM To: fabric@... <fabric@...> Subject: Second Channel Hello, I am attempting to create a second channel after my test network has already been up and running for awhile. Is it possible to do this? I am encountering the below error and the few comments available suggest spinning my network down and removing volumes. I would prefer to avoid that if possible. Error: got unexpected status: BAD_REQUEST -- Unknown consortium name: LoanchainConsortium Sincerely, Spencer
|
|
|
|
Re: Second Channel
Gari Singh <garis@...>
Ah ... so in that case you will first need to update the system channel with the new consortium definition prior to trying to create channel for that consortium.
----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-846-7499 garis@... ----------------------------------------- -----"White, Spencer (S.)" <swhit210@...> wrote: ----- To: Gari Singh <garis@...> From: "White, Spencer (S.)" <swhit210@...> Date: 10/25/2019 09:26AM Cc: "fabric@..." <fabric@...> Subject: [EXTERNAL] Re: [Hyperledger Fabric] Second Channel It is definitely not. I am attempting to create a second channel with a different consortium in a network that has already been spun up with a channel and consortium. Spencer From: Gari Singh <garis@...> Sent: Friday, October 25, 2019 5:49 AM To: White, Spencer (S.) <swhit210@...> Cc: fabric@... <fabric@...> Subject: RE: [Hyperledger Fabric] Second Channel Are you sure that "LoanchainConsortium" is actually the consortium name you used when you originally spun up the network? ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-846-7499 garis@... ----------------------------------------- -----fabric@... wrote: ----- To: "fabric@..." <fabric@...> From: "White, Spencer (S.)" Sent by: fabric@... Date: 10/24/2019 02:05PM Subject: [EXTERNAL] Re: [Hyperledger Fabric] Second Channel My apologies, the below error: Error: got unexpected status: BAD_REQUEST -- Unknown consortium name: LoanchainConsortium Spencer From: White, Spencer (S.) Sent: Thursday, October 24, 2019 1:57 PM To: fabric@... <fabric@...> Subject: Second Channel Hello, I am attempting to create a second channel after my test network has already been up and running for awhile. Is it possible to do this? I am encountering the below error and the few comments available suggest spinning my network down and removing volumes. I would prefer to avoid that if possible. Error: got unexpected status: BAD_REQUEST -- Unknown consortium name: LoanchainConsortium Sincerely, Spencer
|
|
|