超级账本HyperLedger: Fabric Node.js SDK使用时遇到的问题

说明

这是“网易云课堂IT技术快速入门学院”使用的素材。操作、配置文件和代码讲解视频在网易云课堂《HyperLeger Fabric进阶实战课》第五章中。

HyperLedger Fabric的Node.js SDK的使用方法见：《超级账本HyperLedger：Fabric Node.js SDK的使用》，这里记录使用HyperLedger Fabric Node.js SDK时遇到的一些问题，示例代码在Github上：HyperLedger Fabric nodejs sdk examples

Node.js SDK: 加载pem证书，验证失败

如果，指定了pem证书为./tls/ca.crt

   var peer = client.newPeer(
       'grpcs://peer0.member1.example.com:7051',
       {
           pem: './tls/ca.crt',
           clientKey: './tls/client.key',
           clientCert: './tls/client.crt'
       }
   );

运行时出错，如下：

(node:93025) UnhandledPromiseRejectionWarning: Error: Input parameter does not appear to be PEM-encoded.
    at Object.module.exports.pemToDER (/Users/lijiao/Work/Docker/GOPATH/src/github.com/lijiaocn/hyperledger-fabric-sdks-usage/nodejs/node_modules/fabric-client/lib/utils.js:538:9)
    at Peer.getClientCertHash (/Users/lijiao/Work/Docker/GOPATH/src/github.com/lijiaocn/hyperledger-fabric-sdks-usage/nodejs/node_modules/fabric-client/lib/Remote.js:169:25)
    at Function.sendTransactionProposal (/Users/lijiao/Work/Docker/GOPATH/src/github.com/lijiaocn/hyperledger-fabric-sdks-usage/nodejs/node_modules/fabric-client/lib/Channel.js:1524:23)
    at Channel.sendTransactionProposal (/Users/lijiao/Work/Docker/GOPATH/src/github.com/lijiaocn/hyperledger-fabric-sdks-usage/nodejs/node_modules/fabric-client/lib/Channel.js:1459:18)
    at Channel.queryByChaincode (/Users/lijiao/Work/Docker/GOPATH/src/github.com/lijiaocn/hyperledger-fabric-sdks-usage/nodejs/node_modules/fabric-client/lib/Channel.js:1738:15)
    at Fabric_Client.newDefaultKeyValueStore.then.then (/Users/lijiao/Work/Docker/GOPATH/src/github.com/lijiaocn/hyperledger-fabric-sdks-usage/nodejs/client.js:59:20)
    at <anonymous>

原因是pem、clientkey、clientcert需要是证书的内容：

   var peer = client.newPeer(
       'grpcs://peer0.member1.example.com:7051',
       {
           pem: fs.readFileSync('./tls/ca.crt', { encoding: 'utf8' }),
           clientKey: fs.readFileSync('./tls/client.key', { encoding: 'utf8' }),
           clientCert: fs.readFileSync('./tls/client.crt', { encoding: 'utf8' }),
           'ssl-target-name-override': 'peer0.member1.example.com'
       }
   );

Node.js SDK: Invalid cert chain file

错误如下：

0715 16:34:03.966476000 140736069952384 ssl_transport_security.cc:664] Invalid cert chain file.
E0715 16:34:03.966695000 140736069952384 security_connector.cc:1062]   Handshaker factory creation failed with TSI_INVALID_ARGUMENT.
E0715 16:34:03.966702000 140736069952384 secure_channel_create.cc:121] Failed to create secure subchannel for secure name 'peer0.member1.example.com'
E0715 16:34:03.966709000 140736069952384 secure_channel_create.cc:154] Failed to create subchannel arguments during subchannel creation.

grpc issues 4689中说，说明输入的应当是文件内容？不是文件名

   var peer = client.newPeer(
       'grpcs://peer0.member1.example.com:7051',
       {
           pem: './tls/ca.crt',
           clientKey: './tls/client.key',
           clientCert: './tls/client.crt'
       }
   );

原因是pem、clientkey、clientcert需要是证书的内容：

   var peer = client.newPeer(
       'grpcs://peer0.member1.example.com:7051',
       {
           pem: fs.readFileSync('./tls/ca.crt', { encoding: 'utf8' }),
           clientKey: fs.readFileSync('./tls/client.key', { encoding: 'utf8' }),
           clientCert: fs.readFileSync('./tls/client.crt', { encoding: 'utf8' }),
           'ssl-target-name-override': 'peer0.member1.example.com'
       }
   );

参考

编程基础系统基础关注跟踪

Kubernetes Prometheus 超级账本

HyperLedger

超级账本HyperLedger: Fabric Node.js SDK使用时遇到的问题

目录

说明

相关笔记

Node.js SDK: 加载pem证书，验证失败

Node.js SDK: Invalid cert chain file

参考

推荐阅读