It is, however, possible to configure Nginx to do SNI-based routing with TLS passthrough. See https://gist.github.com/kekru/c09dbab5e78bf76402966b13fa72b9d2 for an example config. --------------------

https://github.com/hyperledger/fabric/pull/2136 for master will backport to the next 2.x release as well you can make the changes locally as well ----------------------------------------- Gari Singh D

Looks like we never enabled building the tools image with pkcs11. If you submit a JIRA, we can add it or feel free to submit a pull request as it's a trivial change. ----------------------------------

I believe this error occurs when the cli (peer) was not built with the pkcs11 tag. ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550

Could provide a bit more detail on exactly what you are trying to accomplish? ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King

They are compatible. When bccsp was originally written, x590.MarshalPKCS8PrivateKey() did not exist. But the other utilities were built (cryptogen, tlsgen) were built later. In any case, if you actual

#fabric

The purpose of the transient field is to ensure that private parameters used by chaincode are not in the proposal request which is persisted in the ledger (proposal requests are included in the propos

#fabric-questions #fabric

CGO supports both C and C++ code. Not sure if you are looking for more here? ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King S

#fabric #fabric-questions #externalbuilders

In the end, it does not actually affect anything as we never use this field as far as I recall. Gari Singh garis@... 978-846-7499

#fabric

Take a look at https://lists.hyperledger.org/g/fabric/message/9106 (and the related thread) ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middle

Actually - sorry - scrap this - for some reason I did not see the volume mount (not sure why I did not see it) ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Bl

The Docker daemon listens on /var/run/docker.sock not /host/var/run/docker.sock In the Docker Compose YAML, you'll need to change the value of CORE_VM_ENDPOINT for each peer. For example: https://gith

1) Looks like the type definition is missing a method: https://github.com/hyperledger/fabric-sdk-node/blob/release-1.4/fabric-client/lib/ChannelEventHub.js#L402 So this one looks like the type def nee

With bccsp, you cannot used environment variable overrides unless you actually have the keys/fields defined in the configuration file (fabric-ca-server-config.yaml). The default fabric-ca-server-confi

#hsm #fabric-ca #fabric

The issue is that a prebuilt binary for protoc-gen-grpc-java is NOT available for the Arm architecture ( https://repo.maven.apache.org/maven2/io/grpc/protoc-gen-grpc-java/1.23.0/ ). You will need to b

#fabric-chaincode

Adding usages does not limit the usages; it increases the potential usages. Of course usages are only relevant for consumers which honor usages. ----------------------------------------- Gari Singh Di

#fabric-questions #fabric

Why do you want to add additional (extended) key usages to the enrollment certificates? They currently contain the minimum set for their intended purpose: digital signatures. And we intentionally do n

#fabric-questions #fabric

The core requirement for certificates for Fabric nodes is that they be EC (Elliptic Curve) certificates. You can use any tool you like as the certificate authority for issuing these certificates. open

https://stackoverflow.com/a/63191241/6160507 ----------------------------------------- Gari Singh Distinguished Engineer, CTO - IBM Blockchain IBM Middleware 550 King St Littleton, MA 01460 Cell: 978-

#fabric-ca #tls #ssl

You should not be using `ca-cert.pem` as the TLS server certificate. If you do not specify a TLS key/cert, Fabric CA generates `tls-cert.pem` which will include the SANS configured via ```FABRIC_CA_SE