hyperledger / bevel-operator-fabric

Hyperledger Fabric Kubernetes operator - Hyperledger Fabric operator for Kubernetes (v2.3, v2.4 and v2.5, soon 3.0)
https://hyperledger.github.io/bevel-operator-fabric/
Apache License 2.0
271 stars 91 forks source link

registering user in CA for peer (CA- orgs = org1-ca, org2-ca and ord-ca) #191

Closed hrvrbhanu01 closed 12 months ago

hrvrbhanu01 commented 1 year ago

What happened?

Error: POST failure of request: POST https://org1-ca.hlf.chikitsa.io:443/enroll

kubectl hlf ca register --name=org1-ca --user=peer --secret=peerpw --type=peer --enroll-id enroll --enroll-secret=enrollpw --mspid Org1MSP [fabsdk/fab] 2023/10/03 09:30:22 UTC - logbridge.(cLogger).Info -> INFO TLS Enabled [fabsdk/fab] 2023/10/03 09:30:22 UTC - logbridge.(cLogger).Info -> INFO generating key: &{A:ecdsa S:256} [fabsdk/fab] 2023/10/03 09:30:22 UTC - logbridge.(*cLogger).Info -> INFO encoded CSR Error: POST failure of request: POST https://org1-ca.hlf.chikitsa.io:443/enroll {"hosts":null,"certificate_request":"-----BEGIN CERTIFICATE REQUEST-----\nMIHuMIGWAgEAMBExDzANBgNVBAMTBmVucm9sbDBZMBMGByqGSM49AgEGCCqGSM49\nAwEHA0IABMV1DoRO7vE+CvfLnfUh+EkZX5/c8hiynz\nBiahoKv+9L/UA0g5mSgIzAhBgkqhkiG9w0BCQ4xFDASMBAGA1Ud\nEQQJMAeCBUJoYW51MAoGCCqGSM49BAMCA0cAMEQjJv8qVqntr5s/VQdX\ndkErDhIb2l/0vzeIF/T7AiBQOML9GvLaehqFDtroz8794KY3FhWjOZS6luu7FAVW\nAw==\n-----END CERTIFICATE REQUEST-----\n","profile":"","crl_override":"","label":"","NotBefore":"0001-01-01T00:00:00Z","NotAfter":"0001-01-01T00:00:00Z","ReturnPrecert":false,"CAName":""}: Post "https://org1-ca.hlf.chikitsa.io:443/enroll": http: server gave HTTP response to HTTPS client

What did you expect to happen?

user should've get created

How can we reproduce it (as minimally and precisely as possible)?

kubectl hlf ca register --name=org1-ca --user=peer --secret=peerpw --type=peer --enroll-id enroll --enroll-secret=enrollpw --mspid Org1MSP

Anything else we need to know?

No response

Kubernetes version

```console # kubectl get nodes -o wide ```
hrvrbhanu01 commented 12 months ago

My issue got resolved , when i was trying to use the dns : *.hlf.chikitsa.io which is a subdomain of chikitsa.io ; to expose my custom resources of hlf-operator it was throwing this error. But, when i tried using directly chikitsa.io instead of a subdomain creation it worked. I guess it was due to SSL certificate as it was not provisioned.