Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

us.blockchain.ibm.com.cert failing to validate #78

Open
belltanellc opened this issue Jun 22, 2017 · 9 comments
Open

us.blockchain.ibm.com.cert failing to validate #78

belltanellc opened this issue Jun 22, 2017 · 9 comments

Comments

@belltanellc
Copy link

It's been running fine in Bluemix for months. Now it will not start and errors on

OUT chain_setup.js Deployment request: {"fcn":"init","args":["IGNORE","ME"],"chaincodePath":"chaincode/","certificatePath ":"/certs/peer/cert.pem"}

OUT msg: 'Certificate has not been signed by a trusted authority. [x509: certificate signed by unknown authority (possibly because of "x509: ECDSA verification failure" while trying to verify candidate authority certificate "eca")]' }

The cert shows valid issuer and expiration date. Not After : Jun 12 12:00:00 2019 GMT

@belltanellc belltanellc changed the title us.blockchain.ibm.com.cert failing to vaildate us.blockchain.ibm.com.cert failing to validate Jun 22, 2017
@mrshah-at-ibm
Copy link

Are you using hfc npm module? if yes, what version are you using?

If you have enabled ecdsa mode in your node app, can you remove the line that enables it?

@belltanellc
Copy link
Author

yes. "hfc": "0.6.5",
no idea. I don't think I changed anything re encryption modes.
No code has been changed in 2+ months. Suddenly stopped accepting logins. All restarts since then have failed with the above errors.

@belltanellc
Copy link
Author

I found this line. It's in github. Should it be removed or set to false?
chain.setECDSAModeForGRPC(true);

@belltanellc
Copy link
Author

I tried both, but no change. I tried commenting out -ECDSA- in the list of suites and got bad handshake.

@mastersingh24
Copy link
Contributor

the membership services eca and tca certs have expired

@mrshah-at-ibm
Copy link

@belltanellc can you give us your network ID? we can refresh those certs

@belltanellc
Copy link
Author

belltanellc commented Jun 23, 2017

Sorry. Was in a meeting.
Thx!!

@mrshah-at-ibm
Copy link

@belltanellc the network ID should be on your dashboard on top left. it should be a long string.

@belltanellc
Copy link
Author

f6efed9eb5ec4025996d39ad4889bd0e

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants