In this tutorial we will configure Fabric CA cluster with shared MySQL database
Download binaries for Hyperledger Fabric v1.4.1
curl -sSL http://bit.ly/2ysbOFE | bash -s -- 1.4.1 -d -s
rm -f configUse OpenSSL to generate the CA Cert and Key
mkdir -p ca/private ca/certs ca/newcerts
touch ca/index.txt ca/serial
echo 1000 > ca/serial
openssl ecparam -name prime256v1 -genkey -noout -out ca/private/ca.org1.example.com.key.pem
openssl req -config openssl_root.cnf -new -x509 -sha256 -extensions v3_ca -key ca/private/ca.org1.example.com.key.pem -out ca/certs/ca.org1.example.com.crt.pem -days 3650 -subj "/C=SG/ST=Singapore/L=Singapore/O=org1.example.com/OU=/CN=ca.org1.example.com"Copy the Cert and Key to a new folder. The cert and key pair will be used by both ca0 and ca1
mkdir ca-store
cp ca/certs/ca.org1.example.com.crt.pem ca-store/
cp ca/private/ca.org1.example.com.key.pem ca-store/ca.org1.example.com.keyBring up the components:
- db - The MySQL DB
- adminer - To browse the MySQL DB contents
- haproxy - CA Proxy
- ca0 - First CA
- ca1 - Second CA
$ docker-compose up -d
Creating network "mysqlcasample_basic" with the default driver
Creating db ... done
Creating ca1 ... done
Creating adminer ... done
Creating ca0 ... done
Creating haproxy ... doneVisit localhost:9000 and login using the following credential:
- System: MySQL
- Server: db
- Username: root
- Password: password
- Database: Leave blank for now
You will be able to login and view the databases. Now let's try to register and enroll users to make sure that the CA functions properly
Create the directory for the registrar and user
REGISTRAR_DIR=$PWD/users/admin
USER1_DIR=$PWD/users/user1
USER2_DIR=$PWD/users/user2
mkdir -p $REGISTRAR_DIR $USER1_DIR $USER2_DIREnroll the registrar. Note that 7054 is the port of haproxy
export FABRIC_CA_CLIENT_HOME=$REGISTRAR_DIR
fabric-ca-client enroll --csr.names C=SG,ST=Singapore,L=Singapore,O=org1.example.com -m admin -u http://admin:adminpw@localhost:7054Register [email protected] and [email protected]
fabric-ca-client register --id.name [email protected] --id.secret mysecret --id.type client --id.affiliation org1 -u http://localhost:7054
fabric-ca-client register --id.name [email protected] --id.secret mysecret --id.type client --id.affiliation org1 -u http://localhost:7054Enroll [email protected]
export FABRIC_CA_CLIENT_HOME=$USER1_DIR
fabric-ca-client enroll --csr.names C=SG,ST=Singapore,L=Singapore,O=org1.example.com -u http://[email protected]:mysecret@localhost:7054
mkdir -p $USER1_DIR/msp/admincerts && cp $USER1_DIR/msp/signcerts/*.pem $USER1_DIR/msp/admincerts/Enroll [email protected]
export FABRIC_CA_CLIENT_HOME=$USER2_DIR
fabric-ca-client enroll --csr.names C=SG,ST=Singapore,L=Singapore,O=org1.example.com -u http://[email protected]:mysecret@localhost:7054
mkdir -p $USER2_DIR/msp/admincerts && cp $USER2_DIR/msp/signcerts/*.pem $USER2_DIR/msp/admincerts/./destroy.sh