TommyStarK / hyperledger-fabric-kubernetes

Deploy an Hyperledger Fabric v2.4 network on Kubernetes and use chaincodes as external services.
MIT License
32 stars 14 forks source link

getting tls bad certifiacte error #9

Closed AmeerRiyaz closed 9 months ago

AmeerRiyaz commented 10 months ago

when im trying to join channel using osnadmin im getting tls bad certificate error

TommyStarK commented 10 months ago

Hello,

Would you mind providing a bit more of context, logs ?

Best

AmeerRiyaz commented 10 months ago

yes sure I tried to modify a little your code for installing chaincode directly without using external cc While joining orderer to a channel in 2.5.4 im facing an error while peer is able to join Below is the command iam using for the joining orderer osnadmin channel join --channelID channelall --config-block channelall.block -o orderer0-dummy-com:9443 --ca-file /etc/hyperledger/fabric/crypto/ordererOrganizations/dummy.com/tlsca/tlsca.dummy.com-cert.pem --client-cert /etc/hyperledger/fabric/crypto/ordererOrganizations/dummy.com/orderers/orderer0.dummy.com/tls/server.crt --client-key /etc/hyperledger/fabric/crypto/ordererOrganizations/dummy.com/orderers/orderer0.dummy.com/tls/server.key orderer logs and cli logs im provoiding image

image

Thanks and Regards Ameer

AmeerRiyaz commented 10 months ago

Hello , Can you please guide me through this

TommyStarK commented 10 months ago

Without the modifications you introduced it is going to be hard for me to help you. What I can recommend is first to verify the tls artefacts you are using with openssl. Be sure to check the generated crypto material in the crypto config volume.Also you would want to exec into orderers and peers and look at the tls material they are using.

AmeerRiyaz commented 9 months ago

can u guide me how do i copy my local certificates generated by fabric-ca into the particular location pod

TommyStarK commented 9 months ago

The simplest way is to create a secret from the files and mount this secret as volume to your pods. Please refer to the Kubernetes documentation to achieve that.

I am going to go ahead and close this issue as it seems to be related to your modifications and not the original project. This repository aims to provide a tutorial of how to use chaincode as an external service for a Fabric network running in Kubernetes. Please open an issue if you encounter any trouble with the tutorial as it is.

Best