fabric-ca-server-config.yaml

版权声明：本文为博主原创文章，未经博主允许不得转载。 https://blog.csdn.net/liaynling/article/details/81358762

fabric-ca-server-config.yaml 

version: 1.1.0

port: 7054

debug: false

crlsizelimit: 512000

tls:

  enabled: true

  certfile: tls/tlsca.org1.nx.com-cert.pem

  keyfile: tls/ea7f8452fe421d5b9b97346b3a591755a144955c739f9f46aa8606b75c943874_sk

  clientauth:

    type: noclientcert

    certfiles: tls/tlsca.org1.nx.com-cert.pem

ca:

  name: ca-admin

  keyfile: ca/a65b18e458b33be14e114a822069c64c27da9b96f1a3094c79099795d1792908_sk

  certfile: ca/ca.org1.nx.com-cert.pem

  chainfile:

crl:

  expiry: 24h

registry:

  maxenrollments: -1

  identities:

     - name: admin

       pass: adminpw

       type: client

       affiliation: ""

       attrs:

          hf.Registrar.Roles: "peer,orderer,client,user"

          hf.Registrar.DelegateRoles: "peer,orderer,client,user"

          hf.Revoker: true

          hf.IntermediateCA: true

          hf.GenCRL: true

          hf.Registrar.Attributes: "*"

          hf.AffiliationMgr: true

db:

  type: sqlite3

  datasource: fabric-ca-server.db

  tls:

      enabled: false

      certfiles:

      client:

        certfile:

        keyfile:

ldap:

   enabled: false

   url: ldap://<adminDN>:<adminPassword>@<host>:<port>/<base>

   tls:

      certfiles:

      client:

         certfile:

         keyfile:

   attribute:

      names: ['uid','member']

      converters:

         - name:

           value:

      maps:

         groups:

            - name:

              value:

affiliations:

   org1:

      - department1

   org2:

      - department1

signing:

    default:

      usage:

        - digital signature

      expiry: 8760h

    profiles:

      ca:

         usage:

           - cert sign

           - crl sign

         expiry: 43800h

         caconstraint:

           isca: true

           maxpathlen: 0

      tls:

         usage:

            - signing

            - key encipherment

            - server auth

            - client auth

            - key agreement

         expiry: 8760h

csr:

   cn: tlsca.org1.nx.com

   names:

      - C: US

        ST: "North Carolina"

        L:

        O: Hyperledger

        OU: Fabric

   hosts:

     - tlsca.org1.nx.com

     - localhost

   ca:

      expiry: 131400h

      pathlength: 1

bccsp:

    default: SW

    sw:

        hash: SHA2

        security: 256

        filekeystore:

            keystore: msp/keystore

cacount:

cafiles:

intermediate:

  parentserver:

    url:

    caname:

  enrollment:

    hosts:

    profile:

    label:

  tls:

    certfiles:

    client:

      certfile:

      keyfile: