https://stackoverflow.com/a/63191241/6160507 ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-

#fabric-ca #tls #ssl

I am generating certificates in Hyperledger Fabric using the Fabric CA. I am passing a self-signed certificate as the root certificate for both enrollment and TLS certificate issuance in HLF. It is fo

#fabric-ca #tls #ssl

First, you really should no longer be using Fabric 1.2. We are not doing any bug fixes on it. We currently have Fabric 1.4 which is an LTS release although it's now starting the end of its lifecycle.

#fabric-ca #fabric-ca-client #fabric #hyperledger-fabric

Hi All, I am trying to fetch the most recent config block for the channel. Environment: Ubuntu 18.04.1 LTS Hyperledger Fabric v1.2 Steps followed: Step 0: Getting into the CLI container Step 1: Export

#fabric-ca #fabric-ca-client #fabric #hyperledger-fabric

Hi, I'm trying to register a user via Fabric Java SDK but I get the error: "Registration of 'UserToRegister' failed: Error adding identity 'UserToRegister' to the database: attempt to write a readonly

#fabricca #fabric-ca #fabric-questions #fabric

What is the recommendation to deal with an expired peer certificate? Must the network admin periodically update the local MSP of peer with renewed certificate?

#fabric-ca #hyperledger-fabric #fabric-questions

The CRL will be generated based on the property given as "next update". Now the question is: Is it possible to update the local MSPs of the nodes in the network with the latest CRL automatically? Does

#fabric-ca #fabric-ca-client #hyperledger-fabric

I want 4 intermediate CAs for a peer organization: ICA1, ICA2, ICA3 and ICA4 - one for every Node OU (peer, orderer, admin and client). Let's say if I place ICA1 as the "cacerts" attribute in the Peer

#fabric-ca #hyperledger-fabric #policies

Hi Rocky, https://hyperledger-fabric.readthedocs.io/en/latest/msp.html May I know when you said "Hyperledger Fabric certificate expiration", did you mean TLS certs or enrollment certs and how did you

#fabric-ca #hyperledger-fabric

Hi. 0 I faced Hyperledger Fabric certificate expiration issue. The expiration issue is with orderer admin, orderers, peer admin and peers certificates. So I reenroll orderer admin, orderers, peer admi

#fabric-ca #hyperledger-fabric

Hi all, I still have this issue after multiple tests. Does anyone has an idea on what is causing it? ... Thank you!

#configtxgen #fabric-questions #tls #fabric #fabric-ca

Regarding curve question : Fabric and Fabric CA supports go implementation of elliptic curve , which is short-form Weierstrass curve with a=-3. I know , Fabric supports Pluggable crypto implementation

#fabric #fabric-ca

Hyperledger Fabric officially supports three elliptic curves: prime256v1, secp384r1 and secp521r1. Is it possible to use other elliptic curves in X.509 certificates? I read something about pluggable c

#fabric #fabric-ca

Fabric supports ECDSA for signature currently. There're several non-official work to let it support other crypto standards. For chaincode/client encryption, you can choose whatever type.

#hyperledger-fabric #fabric-ca

> I then wonder why latest fabric-ca user guide mentions about supporting RSA? Because fabric-ca supports the management of certificates using RSA; you just can't use them with Fabric.

#hyperledger-fabric #fabric-ca

Thank you Matthew for answering the query. I then wonder why latest fabric-ca user guide mentions about supporting RSA? I also had same understanding that Hyperledger fabric does not support RSA algor

#hyperledger-fabric #fabric-ca

Fabric does not support RSA keys.

#hyperledger-fabric #fabric-ca

Hi, As per fabric-ca release-1.4 user guide and MSP documentation, hyperledger fabric support only ECDSA keys. However, latest fabric-ca user guide says that fabric-ca supports RSA key algorithm as we

#hyperledger-fabric #fabric-ca

Hi Yacov Thanks for your timely help. We were able to restore our network by updating with new admin cert and orderer not checking expiry check with ORDERER_GENERAL_AUTHENTICATION_NOEXPIRATIONCHECKS=t

#fabric #fabric-ca #tls #hyperledger-fabric

The error has nothing to do with an expired certificate. I suggest you turn on the MSP logging to debug level and then see why the policy wasn't satisfied. From: keerthycbe@... To: fabric@lists.

#fabric #fabric-ca #tls #hyperledger-fabric