Hyperledger Composer-使用TLS时的连接问题 [英] Hyperledger Composer - connection issue when using TLS

问题描述

在多组织，多对等网络顶部部署Composer时遇到问题.我的网络有两个CA，一个订单和六个对等点(每个组织两个).

i'm having issues deploying composer on top of a multi org, multi peer network. My network has two CA's, one order and six peers (two per org).

网络使用TLS，这给了我一些问题.跑步时 作曲者网络ping -n network2 -p org1 -i用户-s pass

The network uses TLS, which is giving me some issues. When running composer network ping -n network2 -p org1 -i user -s pass

我收到SSL错误； E0913 16:54:49.855499904 120141 ssl_transport_security.c:921]握手失败，并出现致命错误SSL_ERROR_SSL:error:14090086:SSL例程:ssl3_get_server_certificate:证书验证失败.

i am receiving SSL errors; E0913 16:54:49.855499904 120141 ssl_transport_security.c:921] Handshake failed with fatal error SSL_ERROR_SSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed.

E0913 16:54:49.864638248 120141 ssl_transport_security.c:921]握手失败，并出现致命错误SSL_ERROR_SSL:error:14090086:SSL例程:ssl3_get_server_certificate:证书验证失败.

E0913 16:54:49.864638248 120141 ssl_transport_security.c:921] Handshake failed with fatal error SSL_ERROR_SSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed.

E0913 16:54:49.865108661 120141 ssl_transport_security.c:921]握手失败，并出现致命错误SSL_ERROR_SSL:error:14090086:SSL例程:ssl3_get_server_certificate:证书验证失败.

E0913 16:54:49.865108661 120141 ssl_transport_security.c:921] Handshake failed with fatal error SSL_ERROR_SSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed.

E0913 16:54:49.865506771 120141 ssl_transport_security.c:921]握手失败，并出现致命错误SSL_ERROR_SSL:error:14090086:SSL例程:ssl3_get_server_certificate:证书验证失败.

E0913 16:54:49.865506771 120141 ssl_transport_security.c:921] Handshake failed with fatal error SSL_ERROR_SSL: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed.

错误:尝试ping操作时出错.错误:尝试查询链码时出错.错误:连接失败 命令失败

Error: Error trying to ping. Error: Error trying to query chaincode. Error: Connect Failed Command failed

这是我的连接文件；

{ "type": "hlfv1", "name": "org1", "orderers": [ { "url" : "grpcs://localhost:7050", "cert" : "-----BEGIN CERTIFICATE-----removed-----END CERTIFICATE-----\n" } ], "ca": { "url": "http://localhost:7054", "name": "ca_peerOrg1", "trustedRoots": [""], "verify": true }, "peers": [ { "requestURL": "grpcs://localhost:7051", "eventURL": "grpcs://localhost:7053", "cert" : "-----BEGIN CERTIFICATE-----removed-----END CERTIFICATE-----\n" }, { "requestURL": "grpcs://localhost:8051", "eventURL": "grpcs://localhost:8053", "cert" : "-----BEGIN CERTIFICATE-----removed-----END CERTIFICATE-----\n" } ], "keyValStore": "/home/paul/.composer-credentials", "channel": "mychannel", "mspID": "Org1MSP", "timeout": "300", "globalcert": "", "maxSendSize": -1, "maxRecvSize": -1 }

{ "type": "hlfv1", "name": "org1", "orderers": [ { "url" : "grpcs://localhost:7050", "cert" : "-----BEGIN CERTIFICATE-----removed-----END CERTIFICATE-----\n" } ], "ca": { "url": "http://localhost:7054", "name": "ca_peerOrg1", "trustedRoots": [""], "verify": true }, "peers": [ { "requestURL": "grpcs://localhost:7051", "eventURL": "grpcs://localhost:7053", "cert" : "-----BEGIN CERTIFICATE-----removed-----END CERTIFICATE-----\n" }, { "requestURL": "grpcs://localhost:8051", "eventURL": "grpcs://localhost:8053", "cert" : "-----BEGIN CERTIFICATE-----removed-----END CERTIFICATE-----\n" } ], "keyValStore": "/home/paul/.composer-credentials", "channel": "mychannel", "mspID": "Org1MSP", "timeout": "300", "globalcert": "", "maxSendSize": -1, "maxRecvSize": -1 }

cert的值与用于启动CA的.pem文件的内容匹配(sh -c'fabric-ca-server start --ca.certfile/etc/hyperledger/fabric-ca-server-config/ca .org1.example.com-cert.pem)

The value of cert matches the contents of the .pem file used to start the CA (sh -c 'fabric-ca-server start --ca.certfile /etc/hyperledger/fabric-ca-server-config/ca.org1.example.com-cert.pem)

有什么想法可以让我使用TLS吗?没有任何composer命令有效，它们都给了我相同的错误

Any ideas how i get this working with TLS? none of the composer commands are working, they are all giving me the same errors

推荐答案

如果您使用cryptogen生成证书，则将为您的组织提供tls文件夹，其中将包含您需要放入连接配置文件中的公共证书.用于CA配置的证书不是要使用的正确证书.

If you used cryptogen to generate your certificates then there will be tls folders for your organisations which will contain the public certificate you need to put into the connection profile. The certificate you use for the CA configuration is not the correct certificate to use.

这篇关于Hyperledger Composer-使用TLS时的连接问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！