hyperledger / fabric-ca

https://wiki.hyperledger.org/display/fabric
Apache License 2.0
442 stars 709 forks source link

Tls certificate expired #389

Open elohffa opened 9 months ago

elohffa commented 9 months ago

I got a issue that is my tls cert is expired . so I upgradet the CA to 1.5.7 also does not work by using following commnad to upgrade the cert fabric-ca-client reenroll --mspdir "/etc/hyperledger/fabric-ca-server/msp/" --tls.certfiles "/etc/hyperledger/fabric-ca-server/tls-cert.pem" --csr.keyrequest.reusekey 2023/12/04 12:39:28 [INFO] Configuration file location: /etc/hyperledger/fabric-ca-server/fabric-ca-client-config.yaml 2023/12/04 12:39:28 [INFO] TLS Enabled 2023/12/04 12:39:29 [INFO] TLS Enabled 2023/12/04 12:39:29 [INFO] encoded CSR Error: Failed to reenroll 'fabric_admin': POST failure of request: POST https://emsd-ca-service:7054/reenroll {"hosts":["start-emsd-ca-client-mlmw7"],"certificate_request":"-----BEGIN CERTIFICATE REQUEST-----\nMIIBVjCB/gIBADBkMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xp\nbmExFDASBgNVBAoTC0h5cGVybGVkZ2VyMQ8wDQYDVQQLEwZGYWJyaWMxFTATBgNV\nBAMMDGZhYnJpY19hZG1pbjBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABL4K56Ly\nEdz5piVDdiAjnnT84SUTXbnrqVFl0RNgX8dJCY2OnlruAhOBL3uKLpzeX/CPDRdf\nZsUmsoFeIetlNxSgODA2BgkqhkiG9w0BCQ4xKTAnMCUGA1UdEQQeMByCGnN0YXJ0\nLWVtc2QtY2EtY2xpZW50LW1sbXc3MAoGCCqGSM49BAMCA0cAMEQCIGzZVLUZg7D8\ne2jCJkrui5Sp08zgQHaSWG6r8yNp+RQ1AiAX8uQP4hRP9c198sjTWCkjVLUNVOS1\nXVsa3xFTHbOZIA==\n-----END CERTIFICATE REQUEST-----\n","profile":"","crl_override":"","label":"","NotBefore":"0001-01-01T00:00:00Z","NotAfter":"0001-01-01T00:00:00Z","ReturnPrecert":false,"CAName":""}: Post "https://emsd-ca-service:7054/reenroll": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2023-12-04T12:39:29+08:00 is after 2023-11-29T09:09:00Z ---