了解Hyperledger架构中的各种证书 [英] Understanding Various Certificates in Hyperledger fabric
问题描述
您好，我正在尝试使用Hyperledger架构进行区块链实现.我进行了第一个网络演示，并在其中找到了很多证书.我试图在下图中按层次排列它们.
Hello I am tryin to use hyperledger fabric for a block chain implementation. I did the first-network demo and found lot of certificates in it. I have tried arranging them hierarchically in below picture.
我有一些与他们有关的问题
I Have some questions related to them
- 为什么需要所有这些不同类别的证书.像不同的msp tls一样，它们是否仅生成一次并复制到不同的位置?
- 这些不同的证书将如何在不同的情况下(例如注册和交流)使用
- 如果我们不使用加密货币，那么某些第三方可以生成所有这些证书.
- fabric-ca或任何其他第三方CA如何在这里提供帮助.
TIA.
推荐答案
首先感谢您为相同的树创建了树.
First of all thanks for creating the tree for the same.
我是超级账本的初学者，但是我从超级账本文档中了解到，每个组织都需要一个唯一的根证书(ca-cert)，该证书将特定组件(对等和订购者)绑定到该组织. Fabric中的事务和通信由实体的私钥(密钥库)签名，然后通过公钥(签名证书)进行验证.
I am a beginner in the hyperledger but what i understand from the hyperledger document that each Organization requires a unique root certificate (ca-cert), that binds specific components (peers and orderers) to that organization. Transactions and communications within Fabric are signed by an entity's private key (keystore), and then verified by means of a public key (signcerts).
由于其他组织也需要交流或共享其分类帐，因此在组织级别需要CA或MSP.在每个组织中，我们可以有多个同级，因此我们也需要这些同级的认证.甚至来自不同组织的同行也可以互相加入，因此signcerts(用于身份验证)和TLScerts(用于安全握手).
As different organization also required to communicate or share their ledger so there is need of CA or MSP on organization level. Within each organization we can have multiple peers so we need certification for these peers too. Even peers from different organizations can join each other so signcerts(for authenticating) and TLScerts(for a secure handshake).
要查看它们是如何生成的，建议您手动生成工件
To have a look how these are generate i suggest you to Manually generate the artifacts
http://hyperledger-fabric.readthedocs.io/en/latest/build_network.html
，然后在创建它们时查看其中的文件夹中的不同证书.
and see the different certs in the folders inside as you created them.
这篇关于了解Hyperledger架构中的各种证书的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
