1. fabric@lists.hyperledger.org
  2. Messages
   Date   
Expired MSP certificates - fabric 1.4.12

Joaquim Pedro C. Oliveira <joaquimpedrooliveira@...>
 

Hello, all.

The Fabric 1.4.12 documentation says that (https://hyperledger-fabric.readthedocs.io/en/release-1.4/msp.html): "It is important to note that MSP identities never expire; they can only be revoked by adding them to the appropriate CRLs."

However, in a test network we've set up using expired MSP certificates, we're getting the following messages:
- in orderers: 2021-10-15 17:34:48.658 UTC [orderer.common.server] initializeLocalMsp -> FATA 002 Failed to initialize local MSP: signing identity expired 334h3m43.658279638s ago

- in fabric-tools, after a "peer channel list": 2021-10-15 18:10:40.930 UTC [main] InitCmd -> ERRO 042 Cannot run peer because error when setting up MSP of type bccsp from directory /etc/hyperledger/msp/users/admin/msp: signing identity expired 334h44m33.930617682s ago

Is this the expected behaviour?

Thanks in advance,

Joaquim Oliveira
"signing identity expired " in Fabric 1.4.12

Joaquim Pedro C. Oliveira <joaquimpedrooliveira@...>
 



Hello, all.

The Fabric 1.4.12 documentation says that (https://hyperledger-fabric.readthedocs.io/en/release-1.4/msp.html): "It is important to note that MSP identities never expire; they can only be revoked by adding them to the appropriate CRLs."

However, in a test network we've set up using expired MSP certificates, we're getting the following messages:
- in orderers: 2021-10-15 17:34:48.658 UTC [orderer.common.server] initializeLocalMsp -> FATA 002 Failed to initialize local MSP: signing identity expired 334h3m43.658279638s ago

- in fabric-tools, after a "peer channel list": 2021-10-15 18:10:40.930 UTC [main] InitCmd -> ERRO 042 Cannot run peer because error when setting up MSP of type bccsp from directory /etc/hyperledger/msp/users/admin/msp: signing identity expired 334h44m33.930617682s ago

Is this the expected behaviour?

Thanks in advance,

Joaquim Oliveira
Re: Question about fabric motivation #fabric

Marcos Sarres
 

Here is an example that may help you.

https://github.com/GoLedgerDev/cc-tools-demo

 

This repository uses a library that checks which MSP is allowed to modify each asset property.

 

For example, the code below defines that only org2MSP can modify the property ‘title’ of asset ‘book’

 

// Description of a book

var Book = assets.AssetType{

               Tag:         "book",

               Label:       "Book",

               Description: "Book",

 

               Props: []assets.AssetProp{

                              {

                                            // Composite Key

                                            Required: true,

                                            IsKey:    true,

                                            Tag:      "title",

                                            Label:    "Book Title",

                                            DataType: "string",

                                            Writers:  []string{`org2MSP`}, // This means only org2 can create the asset (others can edit)

                              },

 

Regards,

 

Marcos Sarres | CEO | +55 61 98116 7866

 

 

De: fabric@... <fabric@...> Em nome de BigBang019
Enviada em: sexta-feira, 15 de outubro de 2021 01:01
Para: fabric@...
Assunto: Re: [Hyperledger Fabric] Question about fabric motivation

 

Thanks for your reply, and thanks to @conanoc.

But I still have some question:

According to @conanoc "You also can add some validation logic in the chaincode to guarantee the access right to some functions or data", 
could you please be more specific on what kind of chaincode API could do this, and how?

Thanks in advance.

Re: Proof of data using HLF

Nikos Karamolegkos
 

Following the previous question. I would like firstly to check if the data obey the rules of the chaincode and if yes, to calculate the hash of the data inside the chaincode which finally will be written to the ledger.
Re: Question about fabric motivation #fabric

conanoc
 

Take a look at this example: https://github.com/hyperledger/fabric-samples/blob/main/token-erc-20/chaincode-javascript/lib/tokenERC20.js#L126
Re: Question about fabric motivation #fabric

BigBang019
 

Thanks for your reply, and thanks to @conanoc.

But I still have some question:

According to @conanoc "You also can add some validation logic in the chaincode to guarantee the access right to some functions or data", 
could you please be more specific on what kind of chaincode API could do this, and how?

Thanks in advance.
Re: Question about fabric motivation #fabric

David Enyeart
 

Additionally the agreed upon chaincode definition specifies the endorsement policy which defines the set of organizations that must endorse a transaction before it can be validated. This way OrgA cannot unilaterally change the state.
Re: Question about fabric motivation #fabric

David Enyeart
 

�
Re: Question about fabric motivation #fabric

conanoc
 

Short answer: By chaincode.

You can only change the world state using chaincode. Both organizations should agree to the chaincode installation and chaincode execution, so the chaincode can control the transaction changing the world state. You also can add some validation logic in the chaincode to guarantee the access right to some functions or data.
Event: Hyperledger Project Quarterly Update Due #tsc-project-update - 10/21/2021 #tsc-project-update #cal-reminder

fabric@lists.hyperledger.org Calendar <noreply@...>
 

Reminder: Hyperledger Project Quarterly Update Due #tsc-project-update

When:
10/21/2021

Organizer: community-architects@...

View Event

Description:
Please file a project status report for the TSC here:

https://wiki.hyperledger.org/display/TSC/2021+Project+Updates

https://wiki.hyperledger.org/display/TSC/2021+TSC+Project+Update+Calendar

Calendar
Calendar

Question about fabric motivation #fabric

BigBang019
 

# My Understanding about fabric:
- part of its motivation is to make collaboration between competitors in the same industry possible;
- so I assume it's a variety of Database, the one with higher security guarantee

# Question
However, after I set up and run a fabric network and go through part of fabric source code, a question occurs to me that:
- The endorsement in peers seems to be processed without "transaction semantic" check. For example, in a fabric network where two competitors collaborate, OrgA submit a malicious transaction which change the world state more beneficial to OrgA while harmful to OrgB. In this case, how could fabric detect and prevent this transaction?
- If we add a "transaction semantic" check, e.g. human check, this could inevitably lower the throughput.

I can't figure out how fabric solve this problem.
Thanks in advance.
Working with bookmarks #bookmark #fabric-chaincode

Sumitvedpathak@...
 

Hi Guys,
I am quite new to Fabric, and in a learning stage. I am trying to have some hands on bookmark in pagination. But it is really giving me tough time to get the bookmarks in the results.
What i am trying is in below code

My couchdb index file 

My query is as below.

When i use only iterator as a return object then i am able to get the result, but when used with {iterator, metadata} to get the bookmark, it complains about  asyncIterator error.
Peer logs shows


Not sure, what i am missing here. Any help would appreciate.

Thanks,
Sumit

Fabric ChainCode Question about SetEvent combined with InvokeChaincode

qingruishen(申清瑞) <qingruishen@...>
 

Hello developers of Hyperledger fabric:

I invoke one chaincode with the method which contains a InvokeChaincode calling, and the cross chaincode calling content contains a SetEvent calling. When I subscribe both chaincode on determined ‘Topic’, I receive no Event.

Here I want to confirm the situation, is this my problem or fabric just not support this kind of invoke yet?

ChainCode background would be like:

Call: ChainCodeA MethodA,

MethodA invoke another ChainCodeB MethodB

in MethodB there is an SetEvent

 

I’ve also attached chaincode source.

 

Wait for your response, Thank you very much.

?
transaction.zip

Now: Fabric Contributor Meeting - 10/13/2021 #cal-notice

fabric@lists.hyperledger.org Calendar <noreply@...>
 

Fabric Contributor Meeting

When:
10/13/2021
9:00am to 10:00am
(UTC-04:00) America/New York

Where:
https://zoom.us/my/hyperledger.community.3?pwd=UE90WHhEaHRqOGEyMkV3cldKa2d2dz09

Organizer: Dave Enyeart enyeart@...

View Event

Description:
For meeting agendas, recordings, and more details, see https://wiki.hyperledger.org/display/fabric/Contributor+Meetings

Join Zoom Meeting
https://zoom.us/j/5184947650?pwd=UE90WHhEaHRqOGEyMkV3cldKa2d2dz09
 
Meeting ID: 518 494 7650
Passcode: 475869
Fabric Contributor Meeting - October 13, 2021

David Enyeart
 

Hyperledger Fabric Contributor Meeting

When: Every other Wednesday 9am US Eastern, 13:00 UTC

Where: https://zoom.us/j/5184947650?pwd=UE90WHhEaHRqOGEyMkV3cldKa2d2dz09

Agendas and Recordings: https://wiki.hyperledger.org/display/fabric/Contributor+Meetings

----------------------------------------------------------------------------------------------------

Agenda for October 13, 2021

- Fabric Strategic Priorities survey results - Dave Enyeart

- Kubernetes Test Network - Josh Kneubuhl

The Kubernetes Test Network re-establishes the Hyperledger test-network as a cloud native application.

Objectives:

- Provide a simple, one click activity for running the Fabric test network.
- Provide a reference guide for deploying production-style networks on Kubernetes.
- Provide a cloud ready platform for developing chaincode, Gateway, and blockchain apps.
- Provide a Kube supplement to the Fabric CA Operations and Deployment guides.
- Support a transition to Chaincode as a Service.
- Support a transition from the Internal, Docker daemon to External Chaincode builders.
- Run on any Kube.
Re: [External] : [Hyperledger Fabric] Queries regarding Hyperledger Fabric Application Development & Deployment reg.

Mark Rakhmilevich
 

Dear Harsha,
Please see below some specific answers from OCI perspective. Feel free to contact me directly on mark.rakhmilevich@...

Best Regards,
Mark Rakhmilevich
PM for OCI Blockchain Platform

-----Original Message-----
From: fabric@... <fabric@...> On Behalf Of J Sri Harsha Vardhan Sai via lists.hyperledger.org
Sent: Tuesday, October 12, 2021 12:31 AM
To: fabric@...
Subject: [External] : [Hyperledger Fabric] Queries regarding Hyperledger Fabric Application Development & Deployment reg.

Dear sir/madam,

I am Harsha Vardhan and I am currently working on using Hyperledger Fabric to build an application for an organization. I am completely new to Hyperledger Fabric. I wanted to be clear regarding the development and deployment phase before starting out. I kindly request you to please answer or direct me to a resource where I can find the answers to the below queries.

1. I plan to deploy the application on cloud. So, should all peers have a cloud account to be a part of the network? (I couldn't receive a definite answer when I contacted AWS or OCI).
-- In OCI you start by creating an account/tenancy. Then you can provision a blockchain (OBP) instance with some number of peers and other nodes, and add other instances for other organizations. You can also add client-orgs to existing instances so they get registered as members without needing to run any infrastructure. Take a look at https://www.oracle.com/blockchain/cloud-platform/ for more details.
2. How can I migrate my application after it is deployed on one cloud platform to another? Can the ledger state be preserved?
-- If you join peer nodes across different clouds, the ledger will be automatically synchronized between the nodes, preserving ledger state.
3. While testing the application, can I purge the test entries from the ledger or should I start afresh?
-- You can use a different channel for fresh data, or implement a "delete" method to do cleanup in the chaincode.
4. Since the Composer tool is deprecated, is there any other alternative?
-- Oracle provides a low-code Blockchain App Builder development tooling that can be used to spec the data assets and automatically generate the smart contracts with CRUD methods, which you can then drive through REST APIs or add your own business logic on top. Check out our recent Hyperledger webinar at https://www.youtube.com/watch?v=LEb5lC4JTD4.

I will to be grateful if you could answer my queries.

Yours sincerely,
Harsha Vardhan
Execution Issues with asset-transfer-private-data - Reg.

Sasikumar R <sasikumarcse@...>
 

Hi team,
      I am new to this hyperledger fabric project. I have executed the Fabcar example and some other examples with help of your documentation. But while I try to execute asset-transfer-private-data example with reference to the documentation, I got the error peer command not found with this command "
peer lifecycle chaincode commit -o localhost:7050 --ordererTLSHostnameOverride 
orderer.example.com --channelID mychannel --name private --version 1.0 
--sequence 1 --collections-config ../asset-transfer-private-data/chaincode-go/collections_config.json 
--signature-policy "OR('Org1MSP.member','Org2MSP.member')" --tls --cafile $ORDERER_CA --peerAddresses localhost:7051 --tlsRootCertFiles $ORG1_CA 
--peerAddresses localhost:9051 --tlsRootCertFiles $ORG2_CA"

Screenshots for your reference

Screenshot from 2021-10-12 21-11-47.png

After that I connected with docker using  this command "docker exec -it cli bash" and executed the same 'peer' command. still it shows the following error.
Screenshot from 2021-10-12 21-14-40.png

Kindly help me to rectify these issues.

Thank you.
Queries regarding Hyperledger Fabric Application Development & Deployment reg.

J Sri Harsha Vardhan Sai <J.Sri.Harsha.Vardhan.Sai.cs116@...>
 

Dear sir/madam,

I am Harsha Vardhan and I am currently working on using Hyperledger Fabric to build an application for an organization. I am completely new to Hyperledger Fabric. I wanted to be clear regarding the development and deployment phase before starting out. I kindly request you to please answer or direct me to a resource where I can find the answers to the below queries.

1. I plan to deploy the application on cloud. So, should all peers have a cloud account to be a part of the network? (I couldn't receive a definite answer when I contacted AWS or OCI).
2. How can I migrate my application after it is deployed on one cloud platform to another? Can the ledger state be preserved?
3. While testing the application, can I purge the test entries from the ledger or should I start afresh?
4. Since the Composer tool is deprecated, is there any other alternative?

I will to be grateful if you could answer my queries.

Yours sincerely,
Harsha Vardhan
Re: Error - "scripts/createChannel.sh: line 40: osnadmin: command not found" while bringing up Test Network. #network #testnetwork

Chris Gabriel <alaskadd@...>
 

Hi Sumitvedpathak,
This error occurs when your images are not 2.3 or later. Download 2.3 or latest and it should work. OSN Admin is not supported on earlier versions.  Also make sure you are on the 2.3 branch of fabric samples test network.  Hope this helps, Chris


On Oct 12, 2021, at 9:43 AM, Sumitvedpathak@... wrote:

Just to add, I am using Fabric 2.2.2 version.

Re: Error - "scripts/createChannel.sh: line 40: osnadmin: command not found" while bringing up Test Network. #network #testnetwork

Sumitvedpathak@...
 

Just to add, I am using Fabric 2.2.2 version.
1261 - 1280 of 11646