Hi Ramesh, 1: In my situation I had all the certs expired, both admin (peer and orderers), TLS and MSP certs. 2: You need to sign with old certs in orderer tu run the update, if I recall correctly the

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Mattia, Doubt1:. Does your both Orderer admin certs and Peer admin certs got expired or only Orderer admin certs got expired? In my case both Orderer admin certs and Peer admin certs got expired. D

#fabric-questions #fabric-orderer #signcerts #fabric

Mattia,Ramesh, If you have not seen Minifabric, you probably can take a few minutes looking into that. It allows you to deploy fabric in literally few minutes and allows you to update channel configur

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Ramesh, Doubt 1: If i have understood correctly, for every update I followed the usual procces for channel update which is: fetch the latest config block decode to json copy the decoded json modifi

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Mattia and Chris, Thank you for your suggestions. update orderer admin certs first in system channel then in every other application channel update peer admin certs first in system channle then in

#fabric-questions #fabric-orderer #signcerts #fabric

Ramesh, When you sign the channel config update transaction, it has to be with the old certs. Mattia, I am glad you were able to recover. Chris

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Ramesh, I've managed to restore my production network but without adding new org. I think it's better if you first restore the network and then add the new organization (having an extra org involve

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Mattia Bolzonella, Is this issue resolved? Even I am facing similar issue related to my certs got expired. I have created new certs and replaced in the same folder as before and my application is w

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Chris, Thanks for the advice, the certs are correct. I will explain better the situation: Currently I have 2 channels, 3 orderers with the TLS certs expired. the system channel an application chann

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Mattia, You have a cert mismatch. Make sure to double check where you placed the newly created certs and make sure they match. Chris

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Chris, I updated one orderer TLS certs in the system channel but it's not included in the raft consensus. If i try to fecth the channel confing block from the updated orderer i get SERVICE UNAVAILA

#fabric-questions #fabric-orderer #signcerts #fabric

Hi, I'm working on the solution proposed, now I'm using a cli peer to do my channel update operations, before doing that I set the following variables in the peer cli: CORE_PEER_LOCALMSPID=MyOrderersM

#fabric-questions #fabric-orderer #signcerts #fabric

Yes, that is it. You got it!

#fabric-questions #fabric-orderer #signcerts #fabric

Just to be clear about what you told me to replace in my system channel configuration, sorry but I want to be 100% sure about what I'm doing: My json looks like this: "channel_group": { "groups": { "A

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Mattia, Yes, you need to export the environment variables to act as orderer MSP admin, then as Org MSP admin when doing that step. I would update Orderer Org first, then Org in separate updates but

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Chris, Thank you again for the reply, I'm going to try what you suggested, for the replacement of the admin certs in the various sections of the config, I do that in one whole update, right? After

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Mattia, ***IMPORTANT** If you are in production and will have adverse customer impact, I recommend taking a look at doing this until you get it fixed (this is for extreme measures, perform this ste

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Chris, Thank you for the quick reply. I will illustrate my situation, it's the worst possible scenario (production environment). So I'm on Fabric 2.2.2 with all my components except Fabric CAs whic

#fabric-questions #fabric-orderer #signcerts #fabric

Hi Mattia, Happy to help you. Can you please provide a bit more detail about your environment? For example, are you on Fabric 1.4 with a solo orderer, raft, etc.? Beyond the above question, here are t

#fabric-questions #fabric-orderer #signcerts #fabric

Hi, i need to update the orderer org admin of the system channel, it's expired but i managed to start the orderer and peer following FAB-18384. Now i need to update the channel configuration but I hav

#fabric-questions #fabric-orderer #signcerts #fabric