Requirement for external x509 certificates signature and key algorithms to be used in Hyperledger Fabric - rsa

We are trying to setup a test network using certificates provided by the organization (i.e., not generated by cryptogen nor by fabric-ca-server).
I have re-created the MSP for peer0, by placing all mentioned certificates and keys in the corresponding folder.
When peer0 starts, throughs the following error:
2020-10-16 14:33:34.269 UTC [bccsp] GetDefault -> DEBU 001 Before using BCCSP, please call InitFactories(). Falling back to bootBCCSP.
2020-10-16 14:33:34.314 UTC [bccsp] GetDefault -> DEBU 002 Before using BCCSP, please call InitFactories(). Falling back to bootBCCSP.
2020-10-16 14:33:34.325 UTC [bccsp_sw] openKeyStore -> DEBU 003 KeyStore opened at [/etc/hyperledger/fabric/msp/keystore]...done
2020-10-16 14:33:34.325 UTC [msp] getPemMaterialFromDir -> DEBU 004 Reading directory /etc/hyperledger/fabric/msp/signcerts
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 005 Inspecting file /etc/hyperledger/fabric/msp/signcerts/peer0.supplier.dlt.ericsson.com.cer
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 006 Reading directory /etc/hyperledger/fabric/msp/cacerts
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 007 Inspecting file /etc/hyperledger/fabric/msp/cacerts/root-ca.pem
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 008 Reading directory /etc/hyperledger/fabric/msp/admincerts
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 009 Reading directory /etc/hyperledger/fabric/msp/intermediatecerts
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 00a Inspecting file /etc/hyperledger/fabric/msp/intermediatecerts/intermediate-issuing-ca.pem
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 00b Reading directory /etc/hyperledger/fabric/msp/tlscacerts
2020-10-16 14:33:34.326 UTC [msp] getMspConfig -> DEBU 00c TLS CA certs folder at [/etc/hyperledger/fabric/msp/tlsintermediatecerts] is empty. Skipping.
2020-10-16 14:33:34.326 UTC [msp] getPemMaterialFromDir -> DEBU 00d Reading directory /etc/hyperledger/fabric/msp/crls
2020-10-16 14:33:34.326 UTC [msp] getMspConfig -> DEBU 00e crls folder not found at [/etc/hyperledger/fabric/msp/crls]. Skipping. [stat /etc/hyperledger/fabric/msp/crls: no such file or directory]
2020-10-16 14:33:34.326 UTC [msp] getMspConfig -> DEBU 00f Loading NodeOUs
2020-10-16 14:33:34.326 UTC [msp] newBccspMsp -> DEBU 010 Creating BCCSP-based MSP instance
2020-10-16 14:33:34.326 UTC [msp] New -> DEBU 011 Creating Cache-MSP instance
2020-10-16 14:33:34.326 UTC [msp] loadLocalMSP -> DEBU 012 Created new local MSP
2020-10-16 14:33:34.327 UTC [msp] Setup -> DEBU 013 Setting up MSP instance Org1MSP
2020-10-16 14:33:34.329 UTC [main] InitCmd -> ERRO 014 Cannot run peer because error when setting up MSP of type bccsp from directory /etc/hyperledger/fabric/msp: Failed importing key with opts [&{true}]: Certificate's public key type not recognized. Supported keys: [ECDSA]
It seems that the provided certificates are not supported by Fabric. Is there any suggestion/guideline about the format of certificates to be valid in Fabric?
The used certificate says:
Signature Algorithm: sha256WithRSAEncryption
Subject Public Key Info: Public Key Algorithm: id-ecPublicKey

At Hyperledger Fabric there are only supported the certificates and signatures that are generated using the algorithm ECDSA. You have more information about it at the following link of Hyperledger Fabric CA.

Related

Grpc handshake failed in chaincode instantiate command

I'm attempting to build a network on a k8s worker with tls connection.
Develop in a cloud sandbox
https://github.com/IBM-Blockchain/ibm-container-service
Provide a sample deployment and topology for Kubernetes
https://jira.hyperledger.org/browse/FAB-3339?focusedCommentId=28519&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-28519
Following the websites above, I tried to set
variables to surface the peer's endpoint.
- name: CORE_PEER_TLS_ENABLED
value: "true"
- name: CORE_PEER_TLS_CERT_FILE
value: "/shared/crypto-config/peerOrganizations/org2.example.com/peers/org2peer0.org2.example.com/tls/server.crt"
- name: CORE_PEER_TLS_KEY_FILE
value: "/shared/crypto-config/peerOrganizations/org2.example.com/peers/org2peer0.org2.example.com/tls/server.key"
- name: CORE_PEER_TLS_ROOTCERT_FILE
value: "/shared/crypto-config/peerOrganizations/org2.example.com/peers/org2peer0.org2.example.com/tls/ca.crt"
- name: CORE_PEER_TLS_SERVERHOSTOVERRIDE
value: "org2peer0.org2.example.com"
- name: CORE_PEER_ADDRESSAUTODETECT
value: "true"
Now I readjust hostname fields in crypto-config.yaml and generate these certs by cryptogen.
But I got the logs below from the peer "org2peer0" when I execute command peer chaincode instantiate.
[36m2017-10-30 09:28:02.366 UTC [chaincode] launchAndWaitForRegister -> DEBU 6e2[0m start container with env:
CORE_CHAINCODE_ID_NAME=mychaincode:v1
CORE_PEER_TLS_ENABLED=true
CORE_PEER_TLS_SERVERHOSTOVERRIDE=org2peer0.org2.example.com
CORE_CHAINCODE_LOGGING_LEVEL=debug
CORE_CHAINCODE_LOGGING_SHIM=debug
CORE_CHAINCODE_LOGGING_FORMAT=%{color}%{time:2006-01-02 15:04:05.000 MST} [%{module}] %{shortfunc} -> %{level:.4s} %{id:03x}%{color:reset} %{message}
[36m2017-10-30 09:28:02.367 UTC [container] lockContainer -> DEBU 6e3[0m waiting for container(nid1-org2peer0-mychaincode-v1) lock
[36m2017-10-30 09:28:02.367 UTC [container] lockContainer -> DEBU 6e4[0m got container (nid1-org2peer0-mychaincode-v1) lock
[36m2017-10-30 09:28:02.367 UTC [dockercontroller] Start -> DEBU 6e5[0m Cleanup container nid1-org2peer0-mychaincode-v1
[36m2017-10-30 09:28:02.368 UTC [dockercontroller] stopInternal -> DEBU 6e6[0m Stop container nid1-org2peer0-mychaincode-v1(No such container: nid1-org2peer0-mychaincode-v1)
[36m2017-10-30 09:28:02.369 UTC [dockercontroller] stopInternal -> DEBU 6e7[0m Kill container nid1-org2peer0-mychaincode-v1 (No such container: nid1-org2peer0-mychaincode-v1)
[36m2017-10-30 09:28:02.370 UTC [dockercontroller] stopInternal -> DEBU 6e8[0m Remove container nid1-org2peer0-mychaincode-v1 (No such container: nid1-org2peer0-mychaincode-v1)
[36m2017-10-30 09:28:02.370 UTC [dockercontroller] Start -> DEBU 6e9[0m Start container nid1-org2peer0-mychaincode-v1
[36m2017-10-30 09:28:02.370 UTC [dockercontroller] getDockerHostConfig -> DEBU 6ea[0m docker container hostconfig NetworkMode: host
[36m2017-10-30 09:28:02.372 UTC [dockercontroller] createContainer -> DEBU 6eb[0m Create container: nid1-org2peer0-mychaincode-v1
[36m2017-10-30 09:28:02.414 UTC [dockercontroller] createContainer -> DEBU 6ec[0m Created container: nid1-org2peer0-mychaincode-v1-e17013fc680a6e7f1f22ff0e5ea3c05ad8317076178f1b1d02f1810716f96d24
[36m2017-10-30 09:28:02.474 UTC [msp] GetLocalMSP -> DEBU 6ed[0m Returning existing local MSP
[36m2017-10-30 09:28:02.474 UTC [msp] GetDefaultSigningIdentity -> DEBU 6ee[0m Obtaining default signing identity
[36m2017-10-30 09:28:02.474 UTC [msp/identity] Sign -> DEBU 6ef[0m Sign: plaintext: 18012A420A320A0E6F72673270656572...A5D2120C08A2EA82808ADB93F914104B
[36m2017-10-30 09:28:02.474 UTC [msp/identity] Sign -> DEBU 6f0[0m Sign: digest: 5386439CFAD132CEA3E5A6AEE5E54E80AC0C06A67B12804AD8BB38F9AF272FE5
[36m2017-10-30 09:28:02.474 UTC [msp] GetLocalMSP -> DEBU 6f1[0m Returning existing local MSP
[36m2017-10-30 09:28:02.474 UTC [msp] GetDefaultSigningIdentity -> DEBU 6f2[0m Obtaining default signing identity
[36m2017-10-30 09:28:02.475 UTC [msp/identity] Sign -> DEBU 6f3[0m Sign: plaintext: 0A123137322E33302E3232302E33333A35303130
[36m2017-10-30 09:28:02.475 UTC [msp/identity] Sign -> DEBU 6f4[0m Sign: digest: D4A6169ADE383CAF5A82AD5EAF501E835C325F5B71E0EC03115DE206F09CC07D
[36m2017-10-30 09:28:02.475 UTC [gossip/discovery] periodicalSendAlive -> DEBU 6f5[0m Sleeping 5s
[36m2017-10-30 09:28:02.508 UTC [msp] GetLocalMSP -> DEBU 6f6[0m Returning existing local MSP
2017-10-30 09:28:02.508 UTC [msp] DeserializeIdentity -> INFO 6f7[0m Obtaining identity
[36m2017-10-30 09:28:02.509 UTC [msp/identity] newIdentity -> DEBU 6f8[0m Creating identity instance for ID &{Org2MSP d07627fee16276b3a09c530d8e78715917cd0f89e5acc3256bb854465a81f8ca}
[36m2017-10-30 09:28:02.654 UTC [dockercontroller] Start -> DEBU 6f9[0m Started container nid1-org2peer0-mychaincode-v1
[36m2017-10-30 09:28:02.684 UTC [container] unlockContainer -> DEBU 6fa[0m container lock deleted(nid1-org2peer0-mychaincode-v1)
[36m2017-10-30 09:28:02.717 UTC [grpc] Printf -> DEBU 6fb[0m grpc: Server.Serve failed to complete security handshake from " <<NODE_PRIVATE_IP>> :49840": read tcp <<POD_CLUSTER_IP>>:5010 -> <<NODE_PRIVATE_IP>>:49840: read: connection reset by peer
Then the command timed out in 5 minutes.
Error: Error endorsing chaincode: rpc error: code = Unknown desc = Timeout expired while starting chaincode
I also tried to set CORE_PEER_CHAINCODELISTENADDRESS but it doesn't work.
The last line means that the connection was canceled by the chaincode container?
Or the endpoint of the peer is still invisible to the container?
I use the ibmblockchain images v1.0.1 and bluemix container service.
I'll appreciate any comments.

Hyperledger fabric channel creation problems

I'm trying to create network hyperledger on raspberry, to test it I began with basic-network downloaded from official hyperledger repository. I modified the docker-compose.yml file using the frbrkoala images version armv7l-1.0.1 from the official docker repo, but I have problem on the channel creation. My output is:
# Create the channel
docker exec -e "CORE_PEER_LOCALMSPID=Org1MSP" -e "CORE_PEER_MSPCONFIGPATH=/etc/hyperledger/msp/users/Admin#org1.example.com/msp" peer0.org1.example.com peer channel create -o orderer.example.com:7050 -c mychannel -f /etc/hyperledger/configtx/channel.tx
2017-08-24 16:38:17.499 UTC [msp] GetLocalMSP -> DEBU 001 Returning existing local MSP
2017-08-24 16:38:17.500 UTC [msp] GetDefaultSigningIdentity -> DEBU 002 Obtaining default signing identity
2017-08-24 16:38:17.515 UTC [channelCmd] InitCmdFactory -> INFO 003 Endorser and orderer connections initialized
2017-08-24 16:38:17.517 UTC [msp] GetLocalMSP -> DEBU 004 Returning existing local MSP
2017-08-24 16:38:17.517 UTC [msp] GetDefaultSigningIdentity -> DEBU 005 Obtaining default signing identity
2017-08-24 16:38:17.518 UTC [msp] GetLocalMSP -> DEBU 006 Returning existing local MSP
2017-08-24 16:38:17.518 UTC [msp] GetDefaultSigningIdentity -> DEBU 007 Obtaining default signing identity
2017-08-24 16:38:17.519 UTC [msp/identity] Sign -> DEBU 008 Sign: plaintext: 0A8C060A074F7267314D53501280062D...53616D706C65436F6E736F727469756D
2017-08-24 16:38:17.519 UTC [msp/identity] Sign -> DEBU 009 Sign: digest: DE3AEEBF44C0CCB43E4EAA6497353CA8156DCC6AD6CC8E49ECD4306F313E2CD0
2017-08-24 16:38:17.538 UTC [msp] GetLocalMSP -> DEBU 00a Returning existing local MSP
2017-08-24 16:38:17.538 UTC [msp] GetDefaultSigningIdentity -> DEBU 00b Obtaining default signing identity
2017-08-24 16:38:17.539 UTC [msp] GetLocalMSP -> DEBU 00c Returning existing local MSP
2017-08-24 16:38:17.539 UTC [msp] GetDefaultSigningIdentity -> DEBU 00d Obtaining default signing identity
2017-08-24 16:38:17.540 UTC [msp/identity] Sign -> DEBU 00e Sign: plaintext: 0AC3060A1508021A0608F981FCCC0522...4FF033E78ABA90BDB1577913810689E9
2017-08-24 16:38:17.540 UTC [msp/identity] Sign -> DEBU 00f Sign: digest: 8ADE9CA4E9BF4E3B87512B5B23FB102E30A0C72EFA8F9A587E4518986F02492D
Error: Got unexpected status: BAD_REQUEST
and the order logs are:
...
...
2017-08-24 16:38:18.757 UTC [policies] GetPolicy -> DEBU 195 Returning policy ChannelCreationPolicy for evaluation
2017-08-24 16:38:18.757 UTC [policies] CommitProposals -> DEBU 196 In commit adding relative sub-policy Application/ChannelCreationPolicy to Channel
2017-08-24 16:38:18.758 UTC [policies] GetPolicy -> DEBU 197 Returning policy Writers for evaluation
2017-08-24 16:38:18.758 UTC [policies] GetPolicy -> DEBU 198 Returning dummy reject all policy because Writers could not be found in /Application/Writers
2017-08-24 16:38:18.758 UTC [policies] GetPolicy -> DEBU 199 Returning dummy reject all policy because Admins could not be found in /Application/Admins
2017-08-24 16:38:18.758 UTC [policies] GetPolicy -> DEBU 19a Returning policy Admins for evaluation
2017-08-24 16:38:18.758 UTC [policies] GetPolicy -> DEBU 19b Returning policy Readers for evaluation
2017-08-24 16:38:18.758 UTC [policies] GetPolicy -> DEBU 19c Returning dummy reject all policy because Readers could not be found in /Application/Readers
2017-08-24 16:38:18.758 UTC [common/configtx] addToMap -> DEBU 19d Adding to config map: [Groups] /Channel
2017-08-24 16:38:18.765 UTC [common/configtx] addToMap -> DEBU 19e Adding to config map: [Groups] /Channel/Application
2017-08-24 16:38:18.767 UTC [common/configtx] addToMap -> DEBU 19f Adding to config map: [Groups] /Channel/Application/Org1MSP
2017-08-24 16:38:18.767 UTC [common/configtx] addToMap -> DEBU 1a0 Adding to config map: [Groups] /Channel/Application/Org2MSP
2017-08-24 16:38:18.768 UTC [common/configtx] addToMap -> DEBU 1a1 Adding to config map: [Values] /Channel/Consortium
2017-08-24 16:38:18.768 UTC [common/configtx] addToMap -> DEBU 1a2 Adding to config map: [Groups] /Channel
2017-08-24 16:38:18.768 UTC [common/configtx] addToMap -> DEBU 1a3 Adding to config map: [Groups] /Channel/Application
2017-08-24 16:38:18.769 UTC [common/configtx] addToMap -> DEBU 1a4 Adding to config map: [Groups] /Channel/Application/Org1MSP
2017-08-24 16:38:18.769 UTC [common/configtx] addToMap -> DEBU 1a5 Adding to config map: [Groups] /Channel/Application/Org2MSP
2017-08-24 16:38:18.770 UTC [common/configtx] addToMap -> DEBU 1a6 Adding to config map: [Policy] /Channel/Application/Admins
2017-08-24 16:38:18.770 UTC [common/configtx] addToMap -> DEBU 1a7 Adding to config map: [Policy] /Channel/Application/Writers
2017-08-24 16:38:18.770 UTC [common/configtx] addToMap -> DEBU 1a8 Adding to config map: [Policy] /Channel/Application/Readers
2017-08-24 16:38:18.771 UTC [common/configtx] addToMap -> DEBU 1a9 Adding to config map: [Values] /Channel/Consortium
2017-08-24 16:38:18.771 UTC [orderer/common/broadcast] Handle -> WARN 1aa Rejecting CONFIG_UPDATE because: Error authorizing update: Error validating DeltaSet: invalid mod_policy for element [Policy] /Channel/Application/Admins: mod_policy not set
2017-08-24 16:38:18.772 UTC [orderer/main] func1 -> DEBU 1ab Closing Broadcast stream
2017-08-24 16:38:18.788 UTC [orderer/common/deliver] Handle -> WARN 1ac Error reading from stream: rpc error: code = Canceled desc = context canceled
2017-08-24 16:38:18.789 UTC [orderer/main] func1 -> DEBU 1ad Closing Deliver stream
I think that the problem are in the last 4 lines. Someone can help me please? thank you.

Channel creating failed for hyperledger fabric. Principal deserialization failure

I'm starting fabric under kubernetes.
I generated artifacts and crypto configs using:
byfn.sh -m generate
And put it on github:
https://github.com/Oborysenko/Separete_nodes/tree/master/k8s/channel-artifacts
https://github.com/Oborysenko/Separete_nodes/tree/master/crypto-config
After that I mounted this repository inside image and changes envs to use those files instead of standart locations.
I have created pods with
fabric_k8s_cli_rc.yaml
fabric_k8s_orderer_rc.yaml
fabric_k8s_peer0_org1_rc.yaml
and they are started, but when I going to create channel I have got this error:
Log from cli:
root#cli-009hv:/var/hyperledger/Separete_nodes/k8s# peer channel create -o orderer-example-com:7050 -c mychannel -f ./channel-artifacts/channel.tx
2017-08-29 14:08:38.106 UTC [msp] GetLocalMSP -> DEBU 001 Returning existing local MSP
2017-08-29 14:08:38.106 UTC [msp] GetDefaultSigningIdentity -> DEBU 002 Obtaining default signing identity
2017-08-29 14:08:38.108 UTC [channelCmd] InitCmdFactory -> INFO 003 Endorser and orderer connections initialized
2017-08-29 14:08:38.109 UTC [msp] GetLocalMSP -> DEBU 004 Returning existing local MSP
2017-08-29 14:08:38.109 UTC [msp] GetDefaultSigningIdentity -> DEBU 005 Obtaining default signing identity
2017-08-29 14:08:38.109 UTC [msp] GetLocalMSP -> DEBU 006 Returning existing local MSP
2017-08-29 14:08:38.109 UTC [msp] GetDefaultSigningIdentity -> DEBU 007 Obtaining default signing identity
2017-08-29 14:08:38.109 UTC [msp/identity] Sign -> DEBU 008 Sign: plaintext: 0A8C060A074F7267324D53501280062D...53616D706C65436F6E736F727469756D
2017-08-29 14:08:38.109 UTC [msp/identity] Sign -> DEBU 009 Sign: digest: 81C39B953EBF7FFB969B253BD7BE1889C9774ADFCF972665AEDECA1972E5984B
2017-08-29 14:08:38.109 UTC [msp] GetLocalMSP -> DEBU 00a Returning existing local MSP
2017-08-29 14:08:38.109 UTC [msp] GetDefaultSigningIdentity -> DEBU 00b Obtaining default signing identity
2017-08-29 14:08:38.109 UTC [msp] GetLocalMSP -> DEBU 00c Returning existing local MSP
2017-08-29 14:08:38.109 UTC [msp] GetDefaultSigningIdentity -> DEBU 00d Obtaining default signing identity
2017-08-29 14:08:38.109 UTC [msp/identity] Sign -> DEBU 00e Sign: plaintext: 0AC3060A1508021A0608E6EA95CD0522...114F35DE6474ADE090C55ED95293128E
2017-08-29 14:08:38.109 UTC [msp/identity] Sign -> DEBU 00f Sign: digest: 3C9B95C261F412FBE6B16D3188AC24A4B2FEF5CC2C74E625ED2F7A3507B57204
Error: Got unexpected status: BAD_REQUEST
Here is what I see in ORDERER log:
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 168 In commit adding relative sub-policy OrdererOrg/Admins to Orderer
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 169 Returning policy Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 16a Returning policy Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 16b Returning policy Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 16c Returning policy Readers for evaluation
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 16d Returning policy Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 16e In commit adding relative sub-policy Org1MSP/Writers to Application
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 16f Returning policy Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 170 In commit adding relative sub-policy Org1MSP/Admins to Application
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 171 Returning policy Readers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 172 In commit adding relative sub-policy Org1MSP/Readers to Application
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 173 Returning policy Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 174 In commit adding relative sub-policy Org2MSP/Writers to Application
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 175 Returning policy Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 176 In commit adding relative sub-policy Org2MSP/Admins to Application
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 177 Returning policy Readers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 178 In commit adding relative sub-policy Org2MSP/Readers to Application
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 179 Returning policy Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 17a Returning policy Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 17b Returning policy OrdererOrg/Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 17c In commit adding relative sub-policy Orderer/OrdererOrg/Admins to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 17d Returning policy Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 17e In commit adding relative sub-policy Orderer/Writers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 17f Returning policy Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 180 In commit adding relative sub-policy Orderer/Admins to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 181 Returning policy BlockValidation for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 182 In commit adding relative sub-policy Orderer/BlockValidation to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 183 Returning policy Readers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 184 In commit adding relative sub-policy Orderer/Readers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 185 Returning policy OrdererOrg/Readers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 186 In commit adding relative sub-policy Orderer/OrdererOrg/Readers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 187 Returning policy OrdererOrg/Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 188 In commit adding relative sub-policy Orderer/OrdererOrg/Writers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 189 Returning policy Org1MSP/Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 18a In commit adding relative sub-policy Application/Org1MSP/Admins to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 18b Returning policy Org1MSP/Readers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 18c In commit adding relative sub-policy Application/Org1MSP/Readers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 18d Returning policy Org2MSP/Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 18e In commit adding relative sub-policy Application/Org2MSP/Writers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 18f Returning policy Org2MSP/Admins for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 190 In commit adding relative sub-policy Application/Org2MSP/Admins to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 191 Returning policy Org2MSP/Readers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 192 In commit adding relative sub-policy Application/Org2MSP/Readers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 193 Returning policy ChannelCreationPolicy for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 194 In commit adding relative sub-policy Application/ChannelCreationPolicy to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 195 Returning policy Org1MSP/Writers for evaluation
2017-08-28 21:55:29.471 UTC [policies] CommitProposals -> DEBU 196 In commit adding relative sub-policy Application/Org1MSP/Writers to Channel
2017-08-28 21:55:29.471 UTC [policies] GetPolicy -> DEBU 197 Returning policy Readers for evaluation
2017-08-28 21:55:29.472 UTC [policies] GetPolicy -> DEBU 198 Returning dummy reject all policy because Readers could not be found in /Application/Readers
2017-08-28 21:55:29.472 UTC [policies] GetPolicy -> DEBU 199 Returning policy Writers for evaluation
2017-08-28 21:55:29.472 UTC [policies] GetPolicy -> DEBU 19a Returning dummy reject all policy because Writers could not be found in /Application/Writers
2017-08-28 21:55:29.472 UTC [policies] GetPolicy -> DEBU 19b Returning policy Admins for evaluation
2017-08-28 21:55:29.472 UTC [policies] GetPolicy -> DEBU 19c Returning dummy reject all policy because Admins could not be found in /Application/Admins
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 19d Adding to config map: [Groups] /Channel
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 19e Adding to config map: [Groups] /Channel/Application
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 19f Adding to config map: [Groups] /Channel/Application/Org1MSP
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a0 Adding to config map: [Groups] /Channel/Application/Org2MSP
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a1 Adding to config map: [Values] /Channel/Consortium
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a2 Adding to config map: [Groups] /Channel
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a3 Adding to config map: [Groups] /Channel/Application
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a4 Adding to config map: [Groups] /Channel/Application/Org1MSP
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a5 Adding to config map: [Groups] /Channel/Application/Org2MSP
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a6 Adding to config map: [Policy] /Channel/Application/Admins
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a7 Adding to config map: [Policy] /Channel/Application/Writers
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a8 Adding to config map: [Policy] /Channel/Application/Readers
2017-08-28 21:55:29.472 UTC [common/configtx] addToMap -> DEBU 1a9 Adding to config map: [Values] /Channel/Consortium
2017-08-28 21:55:29.472 UTC [policies] GetPolicy -> DEBU 1aa Returning policy ChannelCreationPolicy for evaluation
2017-08-28 21:55:29.472 UTC [cauthdsl] func1 -> DEBU 1ab 0xc420112a20 gate 1503957329472652555 evaluation starts
2017-08-28 21:55:29.472 UTC [cauthdsl] func2 -> DEBU 1ac 0xc420112a20 signed by 0 principal evaluation starts (used [false])
2017-08-28 21:55:29.472 UTC [cauthdsl] func2 -> DEBU 1ad 0xc420112a20 processing identity 0 with bytes of 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
2017-08-28 21:55:29.472 UTC [msp/identity] newIdentity -> DEBU 1ae Creating identity instance for ID &{Org1MSP f5eccbba9e5ceaa5fdc5ec3befad4556f32d266007038c66a94823407cb825df}
2017-08-28 21:55:29.472 UTC [cauthdsl] func2 -> ERRO 1af Principal deserialization failure (The supplied identity is not valid, Verify() returned x509: certificate signed by unknown authority) for identity 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
2017-08-28 21:55:29.472 UTC [cauthdsl] func2 -> DEBU 1b0 0xc420112a20 principal evaluation fails
2017-08-28 21:55:29.472 UTC [cauthdsl] func1 -> DEBU 1b1 0xc420112a20 gate 1503957329472652555 evaluation fails
2017-08-28 21:55:29.472 UTC [cauthdsl] func1 -> DEBU 1b2 0xc420112a20 gate 1503957329472910864 evaluation starts
2017-08-28 21:55:29.472 UTC [cauthdsl] func2 -> DEBU 1b3 0xc420112a20 signed by 0 principal evaluation starts (used [false])
2017-08-28 21:55:29.472 UTC [cauthdsl] func2 -> DEBU 1b4 0xc420112a20 processing identity 0 with bytes of 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
2017-08-28 21:55:29.473 UTC [msp/identity] newIdentity -> DEBU 1b5 Creating identity instance for ID &{Org1MSP f5eccbba9e5ceaa5fdc5ec3befad4556f32d266007038c66a94823407cb825df}
2017-08-28 21:55:29.473 UTC [cauthdsl] func2 -> ERRO 1b6 Principal deserialization failure (The supplied identity is not valid, Verify() returned x509: certificate signed by unknown authority) for identity 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
2017-08-28 21:55:29.473 UTC [cauthdsl] func2 -> DEBU 1b7 0xc420112a20 principal evaluation fails
2017-08-28 21:55:29.473 UTC [cauthdsl] func1 -> DEBU 1b8 0xc420112a20 gate 1503957329472910864 evaluation fails
2017-08-28 21:55:29.473 UTC [orderer/common/broadcast] Handle -> WARN 1b9 Rejecting CONFIG_UPDATE because: Error authorizing update: Error validating DeltaSet: Policy for [Groups] /Channel/Application not satisfied: Failed to reach implicit threshold of 1 sub-policies, required 1 remaining
2017-08-28 21:55:29.473 UTC [orderer/main] func1 -> DEBU 1ba Closing Broadcast stream
2017-08-28 21:55:29.476 UTC [orderer/common/deliver] Handle -> WARN 1bb Error reading from stream: rpc error: code = Canceled desc = context canceled
2017-08-28 21:55:29.476 UTC [orderer/main] func1 -> DEBU 1bc Closing Deliver stream
2017-08-29 13:04:31.258 UTC [orderer/main] Deliver -> DEBU 1bd Starting new Deliver handler
2017-08-29 13:04:31.258 UTC [orderer/common/deliver] Handle -> DEBU 1be Starting new deliver loop
2017-08-29 13:04:31.258 UTC [orderer/common/deliver] Handle -> DEBU 1bf Attempting to read seek info message
2017-08-29 13:04:31.263 UTC [orderer/main] Broadcast -> DEBU 1c0 Starting new Broadcast handler
2017-08-29 13:04:31.263 UTC [orderer/common/broadcast] Handle -> DEBU 1c1 Starting new broadcast loop
2017-08-29 13:04:31.263 UTC [orderer/common/broadcast] Handle -> DEBU 1c2 Preprocessing CONFIG_UPDATE
2017-08-29 13:04:31.263 UTC [orderer/configupdate] Process -> DEBU 1c3 Processing channel creation request for channel -f
2017-08-29 13:04:31.263 UTC [orderer/common/broadcast] Handle -> WARN 1c4 Rejecting CONFIG_UPDATE because: Proposed configuration has no application group members, but consortium contains members
2017-08-29 13:04:31.263 UTC [orderer/main] func1 -> DEBU 1c5 Closing Broadcast stream
2017-08-29 13:04:31.265 UTC [grpc] Printf -> DEBU 1c6 transport: http2Server.HandleStreams failed to read frame: read tcp 10.244.3.79:7050->10.244.0.110:33474: read: connection reset by peer
2017-08-29 13:04:31.266 UTC [orderer/common/deliver] Handle -> WARN 1c7 Error reading from stream: rpc error: code = Canceled desc = context canceled
2017-08-29 13:04:31.266 UTC [orderer/main] func1 -> DEBU 1c8 Closing Deliver stream
2017-08-29 13:05:51.750 UTC [orderer/main] Deliver -> DEBU 1c9 Starting new Deliver handler
2017-08-29 13:05:51.750 UTC [orderer/common/deliver] Handle -> DEBU 1ca Starting new deliver loop
2017-08-29 13:05:51.750 UTC [orderer/common/deliver] Handle -> DEBU 1cb Attempting to read seek info message
2017-08-29 13:05:51.753 UTC [orderer/main] Broadcast -> DEBU 1cc Starting new Broadcast handler
2017-08-29 13:05:51.753 UTC [orderer/common/broadcast] Handle -> DEBU 1cd Starting new broadcast loop
2017-08-29 13:05:51.753 UTC [orderer/common/broadcast] Handle -> DEBU 1ce Preprocessing CONFIG_UPDATE
2017-08-29 13:05:51.753 UTC [orderer/configupdate] Process -> DEBU 1cf Processing channel creation request for channel -f
2017-08-29 13:05:51.753 UTC [orderer/common/broadcast] Handle -> WARN 1d0 Rejecting CONFIG_UPDATE because: Proposed configuration has no application group members, but consortium contains members
2017-08-29 13:05:51.753 UTC [orderer/main] func1 -> DEBU 1d1 Closing Broadcast stream
2017-08-29 13:05:51.756 UTC [orderer/common/deliver] Handle -> WARN 1d2 Error reading from stream: rpc error: code = Canceled desc = context canceled
2017-08-29 13:05:51.756 UTC [orderer/main] func1 -> DEBU 1d3 Closing Deliver stream
No other channels were created so it not an issue like here:
FABRIC returns Error: Got unexpected status: BAD_REQUEST
In this issue FABRIC returns Error: Got unexpected status: BAD_REQUEST
I saw that it can be issue
Most commonly, for channel creation, this status indicates that the submitter does not have channel creation rights
But how I can resolve this issue. it's not clear for me.
Thank you for your time.
It appears you are not signing the channel creation request. You need to collect signatures based upon the ChannelCreationPolicy indicated in the consortium definition. In general this defaults to an ALL policy. This means every member of the consortium must sign the config update. Now it seems your's says 1 required. So either you only have 1 member in your consortium, or you have a different policy than ALL (e.g. n_of with 1 sig required).
I think that the error is related to the creation of the channel twice. Have you commented the following line # command: /bin/bash -c './scripts/script.sh ${CHANNEL_NAME}; sleep $TIMEOUT' in the compose.yaml files?
Also, could you tell how you start up your network?
Finally, are you sure that the fields of the crypto-config.yaml and the fields of your files are the same? I.e the MSP identificator, the common name and the host and domain of each node are the same?
try this command
./byfn.sh -m down

Hyperledger REST request

I'm getting strange error querying the API. If I do t#28a3c2e772f0:/opt/gopath/src/github.com/hyperledger/fabric/peer# peer chaincode invoke -o orderer.foo.com:7050 --tls true --cafile /opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/ordererOrganizations/foo.com/orderers/orderer.foo.com/msp/tlss/tlsca.foo.com-cert.pem -C balance -n mycc -c '{"Args":["deposit","a", "10"]}'
I get proper answer
2017-08-24 19:08:57.988 UTC [msp] GetLocalMSP -> DEBU 001 Returning existing local MSP
2017-08-24 19:08:57.988 UTC [msp] GetDefaultSigningIdentity -> DEBU 002 Obtaining default signing identity
2017-08-24 19:08:57.989 UTC [chaincodeCmd] checkChaincodeCmdParams -> INFO 003 Using default escc
2017-08-24 19:08:57.989 UTC [chaincodeCmd] checkChaincodeCmdParams -> INFO 004 Using default vscc
2017-08-24 19:08:57.990 UTC [msp/identity] Sign -> DEBU 005 Sign: plaintext: 0A81070A6508031A0C08C9C8FCCC0510...0A076465706F7369740A01610A023130
2017-08-24 19:08:57.990 UTC [msp/identity] Sign -> DEBU 006 Sign: digest: 3DD0C365C4B78EFDACB28D44D2ACA9237CA30B58F85783C597302F145E646063
2017-08-24 19:08:57.994 UTC [msp/identity] Sign -> DEBU 007 Sign: plaintext: 0A81070A6508031A0C08C9C8FCCC0510...724C7D77E58B98A251A5E3991CE087BC
2017-08-24 19:08:57.994 UTC [msp/identity] Sign -> DEBU 008 Sign: digest: 56E1846030E5CC7DB5651C43F90EE2B6D0F851F33CFE62105CEF998A32902424
2017-08-24 19:08:57.995 UTC [chaincodeCmd] chaincodeInvokeOrQuery -> DEBU 009 ESCC invoke result: version:1 response:<status:200 message:"OK" payload:"\000\000\000\000\000\0004#" > payload:"\n \033N\260\275\314\252\001\331\261\322\305p\222B\362*\236\255\372-\372\351\326f\\\312K\030\2475\210\333\022V\n8\022\024\n\004lscc\022\014\n\n\n\004mycc\022\002\010\003\022 \n\004mycc\022\030\n\007\n\001a\022\002\010\004\032\r\n\001a\032\010\000\000\000\000\000\0004#\032\r\010\310\001\032\010\000\000\000\000\000\0004#\"\013\022\004mycc\032\0031.0" endorsement:<endorser:"\n\nFooMSP\022\353\005-----BEGIN -----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\n-----END -----\n" signature:"0D\002 \027M\316J\003\356\327\212\021a1\233\315\223\317Z8\020\302X\224\374&J\006%\253\375\3461l[\002 5\371\"c\221\355qJ\373\341\226\r\260+\203&rL}w\345\213\230\242Q\245\343\231\034\340\207\274" >
2017-08-24 19:08:57.995 UTC [chaincodeCmd] chaincodeInvokeOrQuery -> INFO 00a Chaincode invoke successful. result: status:200 payload:"\000\000\000\000\000\0004#"
2017-08-24 19:08:57.995 UTC [main] main -> INFO 00b Exiting.....
However, if I do curl -H "Content-Type: application/json" -X POST -d '{ "jsonrpc": "2.0", "method": "invoke", "params": {"type": 1,"chaincodeID":{"name":"mycc"},"ctorMsg": {"args":["get", "a"]},"secureContext": "foo" }, "id":5}' foo.com:7050/chaincode
I got weird chars that looks like a broken encoding.
Not sure if I have configuration or implementation error.
Not sure what result you are getting, but Hyperledger Fabric v1.0.0+ does not have a REST API - only a gRPC-based API.
There are a number of client SDKs (Go, Java, Node, Python) which make it easy to invoke and query though

Error: Got unexpected status: BAD_REQUEST

I believe I have an orderer, two peer's and a cli running on Kubernetes.
Trying to issue peer commands within cli results in errors.
Update: I've tried running the same crypto-config under docker-compose and receive the same error from peer channel create. This suggests either something is incorrect with my cli command or with the crypto-config itself.
I would appreciate some guidance on debugging steps that would help me.
Probably related to the issues summarized in my earlier question:
Received AliveMessage from a peer with the same PKI-ID as myself
Within cli:
CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/ordererOrganizations/example.com/orderers/orderer.example.com CORE_PEER_LOCALMSPID="OrdererMSP" \
peer channel create \
--orderer orderer.default.svc.cluster.local:7050 \
--chain ch01 \
--file channel.170511.tx
Results in:
2017-05-22 17:36:52.235 UTC [logging] InitFromViper -> DEBU 001 Setting default logging level to DEBUG for command 'channel'
2017-05-22 17:36:52.235 UTC [msp] GetLocalMSP -> DEBU 002 Returning existing local MSP
2017-05-22 17:36:52.236 UTC [msp] GetDefaultSigningIdentity -> DEBU 003 Obtaining default signing identity
Error: Got unexpected status: BAD_REQUEST
Usage:
peer channel create [flags]
and coincidentally on orderer:
2017-05-22 17:36:52.326 UTC [orderer/main] Deliver -> DEBU 11f Starting new Deliver handler
2017-05-22 17:36:52.326 UTC [orderer/common/deliver] Handle -> DEBU 120 Starting new deliver loop
2017-05-22 17:36:52.326 UTC [orderer/common/deliver] Handle -> DEBU 121 Attempting to read seek info message
2017-05-22 17:36:52.332 UTC [orderer/main] Broadcast -> DEBU 122 Starting new Broadcast handler
2017-05-22 17:36:52.333 UTC [orderer/common/broadcast] Handle -> DEBU 123 Preprocessing CONFIG_UPDATE
2017-05-22 17:36:52.333 UTC [orderer/multichain] Process -> DEBU 124 Processing channel creation request for channel ch01
2017-05-22 17:36:52.333 UTC [msp] GetLocalMSP -> DEBU 125 Returning existing local MSP
2017-05-22 17:36:52.333 UTC [msp] GetDefaultSigningIdentity -> DEBU 126 Obtaining default signing identity
2017-05-22 17:36:52.333 UTC [msp] GetLocalMSP -> DEBU 127 Returning existing local MSP
2017-05-22 17:36:52.333 UTC [msp] GetDefaultSigningIdentity -> DEBU 128 Obtaining default signing identity
2017-05-22 17:36:52.333 UTC [msp] Sign -> DEBU 129 Sign: plaintext: [[REDACTED]]...[[REDACTED]]
2017-05-22 17:36:52.333 UTC [msp] Sign -> DEBU 12a Sign: digest: [[REDACTED]]
2017-05-22 17:36:52.333 UTC [msp] GetLocalMSP -> DEBU 12b Returning existing local MSP
2017-05-22 17:36:52.333 UTC [msp] GetDefaultSigningIdentity -> DEBU 12c Obtaining default signing identity
2017-05-22 17:36:52.333 UTC [msp] GetLocalMSP -> DEBU 12d Returning existing local MSP
2017-05-22 17:36:52.333 UTC [msp] GetDefaultSigningIdentity -> DEBU 12e Obtaining default signing identity
2017-05-22 17:36:52.333 UTC [msp] Sign -> DEBU 12f Sign: plaintext: [[REDACTED]]...[[REDACTED]]
2017-05-22 17:36:52.333 UTC [msp] Sign -> DEBU 130 Sign: digest: [[REDACTED]]
2017-05-22 17:36:52.334 UTC [orderer/common/broadcast] Handle -> DEBU 131 Broadcast is filtering message of type 4 for channel testchainid
2017-05-22 17:36:52.334 UTC [common/policies] GetPolicy -> DEBU 132 Returning policy Writers for evaluation
2017-05-22 17:36:52.334 UTC [cauthdsl] func1 -> DEBU 133 Gate evaluation starts: (&{N:1 policies:<signed_by:0 > })
2017-05-22 17:36:52.334 UTC [cauthdsl] func2 -> DEBU 134 Principal evaluation starts: (&{%!s(int32=0)}) (used [%!s(bool=false)])
2017-05-22 17:36:52.334 UTC [msp] newIdentity -> DEBU 135 Creating identity instance for ID &{OrdererMSP DEFAULT}
2017-05-22 17:36:52.334 UTC [msp] Validate -> INFO 136 MSP OrdererMSP validating identity
2017-05-22 17:36:52.334 UTC [cauthdsl] func2 -> DEBU 137 Principal evaluation fails: (&{%!s(int32=0)})%!(EXTRA []bool=[false])
2017-05-22 17:36:52.334 UTC [cauthdsl] func1 -> DEBU 138 Gate evaluation fails: (&{N:1 policies:<signed_by:0 > })
2017-05-22 17:36:52.334 UTC [cauthdsl] func1 -> DEBU 139 Gate evaluation starts: (&{N:1 policies:<signed_by:0 > })
2017-05-22 17:36:52.334 UTC [cauthdsl] func2 -> DEBU 13a Principal evaluation starts: (&{%!s(int32=0)}) (used [%!s(bool=false)])
2017-05-22 17:36:52.334 UTC [msp] newIdentity -> DEBU 13b Creating identity instance for ID &{OrdererMSP DEFAULT}
2017-05-22 17:36:52.334 UTC [cauthdsl] func2 -> DEBU 13c Principal evaluation fails: (&{%!s(int32=0)})%!(EXTRA []bool=[false])
2017-05-22 17:36:52.334 UTC [cauthdsl] func1 -> DEBU 13d Gate evaluation fails: (&{N:1 policies:<signed_by:0 > })
2017-05-22 17:36:52.334 UTC [cauthdsl] func1 -> DEBU 13e Gate evaluation starts: (&{N:1 policies:<signed_by:0 > })
2017-05-22 17:36:52.334 UTC [cauthdsl] func2 -> DEBU 13f Principal evaluation starts: (&{%!s(int32=0)}) (used [%!s(bool=false)])
2017-05-22 17:36:52.334 UTC [msp] newIdentity -> DEBU 140 Creating identity instance for ID &{OrdererMSP DEFAULT}
2017-05-22 17:36:52.334 UTC [cauthdsl] func2 -> DEBU 141 Principal evaluation fails: (&{%!s(int32=0)})%!(EXTRA []bool=[false])
2017-05-22 17:36:52.334 UTC [cauthdsl] func1 -> DEBU 142 Gate evaluation fails: (&{N:1 policies:<signed_by:0 > })
2017-05-22 17:36:52.334 UTC [orderer/common/broadcast] Handle -> WARN 143 Rejecting broadcast message because of filter error: Rejected by rule: *sigfilter.sigFilter
2017-05-22 17:36:52.336 UTC [orderer/common/deliver] Handle -> WARN 144 Error reading from stream: stream error: code = 1 desc = "context canceled"
crypto-config:
OrdererOrgs:
- Name: Orderer
Domain: default.svc.cluster.local
Specs:
- Hostname: orderer
PeerOrgs:
- Name: Org1
Domain: org1.svc.cluster.local
Template:
Count: 2
Users:
Count: 2
- Name: Org2
Domain: org2.svc.cluster.local
Template:
Count: 2
Users:
Count: 2
Please keep the channel name all small case only. This solved the problem for me.
Before creating the channel artifact set the channel name to small letters like below:
export CHANNEL_NAME=casesensitivechannelname
Use the same channel name while creating channel.
I think that you haven't especified well the MSP directory and the MSP identities.
The CORE_PEER_MSPCONFIGPATH should coincide with your certificates directories. As the same as the CORE_PEER_LOCALMSPID. In my opinios, that is the issue.
Make sure that the configuration of the crypto-config file, the configtx file and the docker-compose file coincide.
When you execute the cryptogen tool, it creates you a directories tree with all the certificates that you need. It follows the Domain and Host that you define in this file.
When you execute the configtxgen tool, you define the MSP directory for each organization.
Finally, in the docker-compose file you also define the MSP ID and the directories for the MSP config path.
In your case, you define it here:
CORE_PEER_MSPCONFIGPATH=/opt/gopath/src/github.com/hyperledger/fabric/peer/crypto/ordererOrganizations/example.com/orderers/orderer.example.com CORE_PEER_LOCALMSPID="OrdererMSP"
Use "peer channel list" to see a list of existing channels. You cannot create a new channel with the same name as existing channels.