Open Araj28196 opened 11 months ago
Hi @Araj28196 The same issue I faced recently while setting up the Hyperledger on the local Kubernetes cluster. To fix the problem you need to generate the yaml from the command line & set up the CA again.
kubectl hlf ca create --storage-class=local-path --capacity=2Gi --name=org1-ca --enroll-id=enroll --enroll-pw=enrollpw --namespace=fabric --output org1-ca.yaml
Once the file is generated add all the node IPs to the hosts
section everywhere inline to localhost. I am attaching my CA yaml for you to look over.
We can collaborate to mutually set up the Fabric network locally, Let me know if you'd be open to connecting.
I hope it helps to solve your issue.
apiVersion: hlf.kungfusoftware.es/v1alpha1
kind: FabricCA
metadata:
creationTimestamp: null
name: ord-ca
namespace: fabric
spec:
affinity: null
ca:
affiliations: null
bccsp:
default: SW
sw:
hash: SHA2
security: "256"
ca: null
cfg:
affiliations:
allowRemove: true
identities:
allowRemove: true
crl:
expiry: 24h
csr:
ca:
expiry: 131400h
pathLength: 0
cn: ca
hosts:
- localhost
- 192.168.56.11
- 192.168.56.12
names:
- C: US
L: ""
O: Hyperledger
OU: North Carolina
ST: ""
intermediate:
parentServer:
caName: ""
url: ""
name: ca
registry:
identities:
- affiliation: ""
attrs:
hf.AffiliationMgr: true
hf.GenCRL: true
hf.IntermediateCA: true
hf.Registrar.Attributes: '*'
hf.Registrar.DelegateRoles: '*'
hf.Registrar.Roles: '*'
hf.Revoker: true
name: enroll
pass: enrollpw
type: client
max_enrollments: -1
signing: null
subject:
C: ES
L: Alicante
O: Kung Fu Software
OU: Tech
ST: Alicante
cn: ca
tlsCa: null
clrSizeLimit: 512000
cors:
enabled: false
origins: []
db:
datasource: fabric-ca-server.db
type: sqlite3
debug: false
env: null
gatewayApi:
gatewayName: hlf-gateway
gatewayNamespace: default
port: 443
hosts:
- localhost
- ord-ca
- ord-ca.fabric
- 192.168.56.11
- 192.168.56.12
image: hyperledger/fabric-ca
imagePullSecrets: null
istio:
ingressGateway: ingressgateway
port: 443
metrics:
provider: prometheus
statsd:
address: 127.0.0.1:8125
network: udp
prefix: server
writeInterval: 10s
resources:
limits:
cpu: 300m
memory: 256Mi
requests:
cpu: 10m
memory: 128Mi
rootCA:
subject:
C: California
L: ""
O: Hyperledger
OU: Fabric
ST: ""
cn: ca
service:
type: NodePort
serviceMonitor: null
storage:
accessMode: ReadWriteOnce
size: 2Gi
storageClass: local-path
tlsCA:
affiliations: null
bccsp:
default: SW
sw:
hash: SHA2
security: "256"
ca: null
cfg:
affiliations:
allowRemove: true
identities:
allowRemove: true
crl:
expiry: 24h
csr:
ca:
expiry: 131400h
pathLength: 0
cn: tlsca
hosts:
- localhost
- 192.168.56.11
- 192.168.56.12
names:
- C: US
L: ""
O: Hyperledger
OU: North Carolina
ST: ""
intermediate:
parentServer:
caName: ""
url: ""
name: tlsca
registry:
identities:
- affiliation: ""
attrs:
hf.AffiliationMgr: true
hf.GenCRL: true
hf.IntermediateCA: true
hf.Registrar.Attributes: '*'
hf.Registrar.DelegateRoles: '*'
hf.Registrar.Roles: '*'
hf.Revoker: true
name: enroll
pass: enrollpw
type: client
max_enrollments: -1
signing: null
subject:
C: ES
L: Alicante
O: Kung Fu Software
OU: Tech
ST: Alicante
cn: tlsca
tlsCa: null
tolerations: null
version: 1.4.9
[fabsdk/fab] 2023/10/02 19:36:26 UTC - logbridge.(cLogger).Info -> INFO TLS Enabled [fabsdk/fab] 2023/10/02 19:36:26 UTC - logbridge.(cLogger).Info -> INFO generating key: &{A:ecdsa S:256} [fabsdk/fab] 2023/10/02 19:36:26 UTC - logbridge.(*cLogger).Info -> INFO encoded CSR Error: POST failure of request: POST https://64.227.164.113:30884/enroll {"hosts":null,"certificate_request":"-----BEGIN CERTIFICATE REQUEST-----\nMIIBBzCBrwIBADARMQ8wDQYDVQQDEwZlbnJvbGwwWTATBgcqhkjOPQIBBggqhkjO\nPQMBBwNCAAT5d4r4RvdZLE1ri1OH9lroq3LQ1Qgk4EM3+EUwBw0xirL1FsWA5FGC\nInjDO/lnc0f6jC6EYXM8V7WXGzeTYDrAoDwwOgYJKoZIhvcNAQkOMS0wKzApBgNV\nHREEIjAggh51YnVudHUtcy0ydmNwdS00Z2ItYW1kLWJscjEtMDEwCgYIKoZIzj0E\nAwIDRwAwRAIgOrkye0ACCLkoHzafwTniVAeAE2MJBNf2Cu9r9IzEClACIFYElcV8\nD8B7TKFccE08zAp7fFF5lgE7G89mrarbnNje\n-----END CERTIFICATE REQUEST-----\n","profile":"","crl_override":"","label":"","NotBefore":"0001-01-01T00:00:00Z","NotAfter":"0001-01-01T00:00:00Z","ReturnPrecert":false,"CAName":""}: Post "https://64.227.164.113:30884/enroll": x509: certificate is valid for 127.0.0.1, not 64.227.164.113
i have checked firewall and everything is open i have done everything from the video but stuck in this point Please let me know how to figure out the solution