Fabric节点证书说明

查看证书拥有者信息
openssl x509 -in ca.example.com-cert.pem  -noout -subject

查看证书序列号
openssl x509 -in ca.example.com-cert.pem -noout -serial

查看证书全部信息
openssl x509 -in ca.example.com-cert.pem  -noout -text

Fabric提供了Cryptogen工具来通过“ crypto-config.yaml”文件指定的网络拓扑,生成crypto-config证书库。

crypto-config文件夹下

1.新增组织录入
    交易证书
    peerOrganizations/org1.example.com/msp/cacerts/ca.org1.example.com-cert.pem
    tls证书
    peerOrganizations/org1.example.com/msp/tlscacerts/tlsca.org1.example.com-cert.pem

2.peer节点录入
    交易证书
    peerOrganizations/org1.example.com/peers/peer0.org1.example.com/msp/signcerts/peer0.org1.example.com-cert.pem
    tls证书
    peerOrganizations/org1.example.com/peers/peer0.org1.example.com/tls/server.crt

3.order节点录入
    交易证书
    ordererOrganizations/example.com/orderers/orderer.example.com/msp/signcerts/orderer.example.com-cert.pem
    tls证书
    ordererOrganizations/example.com/orderers/orderer.example.com/tls/server.crt

4.ca节点录入
    交易证书
    peerOrganizations/org1.example.com/msp/cacerts/ca.org1.example.com-cert.pem
    tls证书
    peerOrganizations/org1.example.com/msp/tlscacerts/tlsca.org1.example.com-cert.pem

5.用户录入
    交易签名证书
    peerOrganizations/org1.example.com/users/Admin@org1.example.com/msp/signcerts/Admin@org1.example.com-cert.pem
    私钥
    peerOrganizations/org1.example.com/users/Admin@org1.example.com/msp/keystore/30e90cbc1a3af805a8129bf6609cb73accd6fb79fff893fbcb0d439105c41091_sk