Upgrading to 2.2.1 #fabric-ca #fabric-orderer #fabric


pmcosta1@...
 

Hi all,
 
In our production environment we have a DL based on fabric 1.4.6 where both our CA's certificate and all issued certificates are RSA encrypted. 
 
Since as of version 2.0 fabric stopped supporting RSA in order to upgrade to 2.2.1 we've updated the CA's certificate as well as the crypto material for all the involved parties to ECDSA. 
 
However when trying to update the orderer images to 2.1.1 we get the following error:
 
[orderer.common.server] Main -> PANIC Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config: setting up the MSP manager failed: Failed importing key with opts [&{true}]: Certificate's public key type not recognized. Supported keys: [ECDSA]
panic: Failed validating bootstrap block: initializing channelconfig failed: could not create channel Orderer sub-group config: setting up the MSP manager failed: Failed importing key with opts [&{true}]: Certificate's public key type not recognized. Supported keys: [ECDSA]
 
The order no longer supports RSA and is failing to validate blocks signed with RSA keys.
 
Any hints on how to deal with this?
 
Thanks in advance,


Mark Lewis
 

There is a discussion of this issue at: https://github.com/hyperledger/fabric/pull/2069