问题描述
当我使用docker启动fabricCA服务器时,使用命令
fabric-ca-client enroll -u http://admin:adminpw@localhost:7054
发生错误
错误:请求的POST失败:POST http:// localhost:7054 / enroll { “主机”:[ “Ubuntu的”] “certificate_request”:“----- BEGIN CERTIFICATE REQUEST ----- \ nMIIBPDCB4wIBADBdMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xp \ nbmExFDASBgNVBAoTC0h5cGVybGVkZ2VyMQ8wDQYDVQQLEwZGYWJyaWMxDjAMBgNV \ nBAMTBWFkbWluMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEA0xOrwYS5y3LYsWo \ n4SVsajuCAV3fYhxF3p1HbW4koQyjH1oHjCp3 + dXfBbp2tV5ADdHrAemnrC + JR9zq \ nvq1tKqAkMCIGCSqGSIb3DQEJDjEVMBMwEQYDVR0RBAowCIIGdWJ1bnR1MAoGCCqG \ nSM49BAMCA0gAMEUCIQC7DFmf8FQ4CEZfI9x + rIlymeVbfz7kdcN1w3O9i9YrbwIg \ nJeBScp3ut4sSqRdgSYuM + TjDO + eDMiFvbvGEUJYe7Ic = \ n -----结束证书请求----- \ n“,” profile“:”“,” crl_override“:”“,” label“:”“,” NotBefore“:” 0001 -01-01T00:00:00Z“,” NotAfter“:” 0001-01-01T00:00:00Z“,” ReturnPrecert“:false,” CAName“:”“}}:发表” http:// localhost:7054 / enroll”:net / http:HTTP / 1.x传输连接断开:HTTP响应格式错误“ \ x15 \ x03 \ x01 \ x00 \ x02 \ x02 \ x16”
docker-compose.yml:
image: hyperledger/fabric-ca
container_name: ca.buyer.com
environment:
- FABRIC_CA_HOME=/etc/hyperledger/fabric-ca-server
- FABRIC_CA_SERVER_CA_NAME=ca.buyer.com
- FABRIC_CA_SERVER_CA_CERTFILE=/etc/hyperledger/fabric-ca-server-config/ca.buyer.com-cert.pem
- FABRIC_CA_SERVER_CA_KEYFILE=/etc/hyperledger/fabric-ca-server-config/78e27e6db18578fefd8a98fe74f8393e4cb5ee414e887f3325e4105239757727_sk
- FABRIC_CA_SERVER_TLS_ENABLED=true
- FABRIC_CA_SERVER_TLS_CERTFILE=/etc/hyperledger/fabric-ca-server-config/ca.buyer.com-cert.pem
- FABRIC_CA_SERVER_TLS_KEYFILE=/etc/hyperledger/fabric-ca-server-config/78e27e6db18578fefd8a98fe74f8393e4cb5ee414e887f3325e4105239757727_sk
ports:
- 7054:7054
command: sh -c 'fabric-ca-server start -b admin:adminpw -d'
volumes:
- ./crypto-config/peerOrganizations/buyer.com/ca/:/etc/hyperledger/fabric-ca-server-config
networks:
default:
aliases:
- ca.buyer.com
解决方法
Fabric CA服务器在启用TLS的情况下启动。客户应在注册过程中通过tls证书。
请尝试
fabric-ca-client注册-u http:// admin:adminpw @ localhost:7054 --tls.certfiles $ FABRIC_CA_SERVER_CA_CERTFILE