是否可以在Hyperledger Fabrics中使用第三方CA进行生产阶段 [英] Is it possible to use a third party CA in Hyperledger Fabrics for production phase

问题描述

我在一家使用Hyperledger架构构建应用程序的公司中工作.到目前为止，我们一直在使用结构CA.现在，在生产阶段，我们计划转移到第三方ca提供商.

I am working in a company where we are using the hyperledger fabric to build our application. we have been using the fabric CA till now. Now for the production phase we are planning to move to third party ca provider.

我已经阅读了Fabric CA的文档( https://hyperledger-fabric-ca.readthedocs.io/en/release-1.4/)以了解其工作原理.我一直在寻找Stackoverflow Fabric标签( https://stackoverflow.com/questions/tagged/hyperledger-fabric)如果我可以找到一些相关的解决方案，但我找不到它.

I have read the documentation of the Fabric CA (https://hyperledger-fabric-ca.readthedocs.io/en/release-1.4/) for understanding how it works. I have been looking in the Stackoverflow Fabric tag (https://stackoverflow.com/questions/tagged/hyperledger-fabric) if i could find some relevant solution but i wasn't able to find it.

推荐答案

是的，您可以使用其他ca提供程序，只要它们提供x.509证书即可使用它们.最后，结构CA要做的是:

Yes you can use other ca providers, as long as they give the x.509 certificates you can use them. In the end what the fabric CA does is:

身份注册，或作为用户注册表连接到LDAP

registration of identities, or connects to LDAP as the user registry

颁发注册证书(ECerts)

issuance of Enrollment Certificates (ECerts)

证书续订和撤销

您可以使用hashicorp保险库等其他提供程序.

You can use other providers such as hashicorp vault.

https://learn.hashicorp.com/vault/secrets -management/sm-pki-engine

这篇关于是否可以在Hyperledger Fabrics中使用第三方CA进行生产阶段的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！