how do i fix this issue with my ordering node? i already tried to renew the Enrollment Cert Expiration but it is not updating or getting renewed at all.
I am using IBP Console.
General.ConnectionTimeout = 0s
General.GenesisMethod = "file"
General.GenesisFile = "/certs/genesis/orderer.block"
General.BootstrapMethod = "file"
General.BootstrapFile = "/certs/genesis/orderer.block"
General.Profile.Enabled = false
General.Profile.Address = "0.0.0.0:6060"
General.LocalMSPDir = "/certs/msp"
General.LocalMSPID = "OrdererOrg"
General.BCCSP.Default = "PKCS11"
General.BCCSP.SW.Security = 256
General.BCCSP.SW.Hash = "SHA2"
General.BCCSP.SW.FileKeystore.KeyStorePath = ""
General.BCCSP.PKCS11.Security = 256
General.BCCSP.PKCS11.Hash = "SHA2"
General.BCCSP.PKCS11.Library = "/usr/local/lib/libpkcs11-proxy.so"
General.BCCSP.PKCS11.Label = "prod-ha-grp"
General.BCCSP.PKCS11.Pin = "63853796"
General.BCCSP.PKCS11.SoftwareVerify = false
General.BCCSP.PKCS11.Immutable = false
General.BCCSP.PKCS11.AltID = ""
General.BCCSP.PKCS11.KeyIDs = []
General.BCCSP.PKCS11.sessionCacheSize = 0
General.BCCSP.PKCS11.createSessionRetries = 0
General.BCCSP.PKCS11.createSessionRetryDelay = 0
General.Authentication.TimeWindow = 15m0s
General.Authentication.NoExpirationChecks = true
General.MaxRecvMsgSize = 104857600
General.MaxSendMsgSize = 104857600
FileLedger.Location = "/ordererdata/ledger/ibporderer"
FileLedger.Prefix = ""
Kafka.Retry.ShortInterval = 1m0s
Kafka.Retry.ShortTotal = 10m0s
Kafka.Retry.LongInterval = 10m0s
Kafka.Retry.LongTotal = 12h0m0s
Kafka.Retry.NetworkTimeouts.DialTimeout = 30s
Kafka.Retry.NetworkTimeouts.ReadTimeout = 30s
Kafka.Retry.NetworkTimeouts.WriteTimeout = 30s
Kafka.Retry.Metadata.RetryMax = 3
Kafka.Retry.Metadata.RetryBackoff = 250ms
Kafka.Retry.Producer.RetryMax = 3
Kafka.Retry.Producer.RetryBackoff = 100ms
Kafka.Retry.Consumer.RetryBackoff = 2s
Kafka.Verbose = false
Kafka.Version = 0.10.2.0
Kafka.TLS.Enabled = false
Kafka.TLS.PrivateKey = ""
Kafka.TLS.Certificate = ""
Kafka.TLS.RootCAs = []
Kafka.TLS.ClientAuthRequired = false
Kafka.TLS.ClientRootCAs = []
Kafka.TLS.TLSHandshakeTimeShift = 0s
Kafka.SASLPlain.Enabled = false
Kafka.SASLPlain.User = ""
Kafka.SASLPlain.Password = ""
Kafka.Topic.ReplicationFactor = 0
Debug.BroadcastTraceDir = ""
Debug.DeliverTraceDir = ""
Consensus = map[SnapDir:/ordererdata/raft/ibporderer/snapshot WALDir:/ordererdata/raft/ibporderer/wal]
Operations.ListenAddress = "0.0.0.0:8443"
Operations.TLS.Enabled = true
Operations.TLS.PrivateKey = "/certs/tls/keystore/key.pem"
Operations.TLS.Certificate = "/certs/tls/signcerts/cert.pem"
Operations.TLS.RootCAs = [/certs/msp/tlscacerts/cacert-0.pem]
Operations.TLS.ClientAuthRequired = false
Operations.TLS.ClientRootCAs = [/certs/msp/tlscacerts/cacert-0.pem]
Operations.TLS.TLSHandshakeTimeShift = 0s
Metrics.Provider = "prometheus"
Metrics.Statsd.Network = "udp"
Metrics.Statsd.Address = "127.0.0.1:8125"
Metrics.Statsd.WriteInterval = 30s
Metrics.Statsd.Prefix = ""
ChannelParticipation.Enabled = true
ChannelParticipation.MaxRequestBodySize = 1048576
Admin.ListenAddress = "0.0.0.0:9443"
Admin.TLS.Enabled = true
Admin.TLS.PrivateKey = "/certs/tls/keystore/key.pem"
Admin.TLS.Certificate = "/certs/tls/signcerts/cert.pem"
Admin.TLS.RootCAs = [/certs/msp/tlscacerts/cacert-0.pem]
Admin.TLS.ClientAuthRequired = true
Admin.TLS.ClientRootCAs = [/certs/msp/tlscacerts/cacert-0.pem]
Admin.TLS.TLSHandshakeTimeShift = 0s
2024-08-11 03:32:51.908 UTC 0010 PANI [orderer.common.server] loadLocalMSP -> Failed to setup local msp with config: signing identity expired 1195h55m51.908209931s ago
panic: Failed to setup local msp with config: signing identity expired 1195h55m51.908209931s ago
goroutine 1 [running]:
go.uber.org/zap/zapcore.(*CheckedEntry).Write(0xc0002adbc0, {0x0, 0x0, 0x0})
/go/src/github.com/hyperledger/fabric/vendor/go.uber.org/zap/zapcore/entry.go:232 +0x44c
go.uber.org/zap.(*SugaredLogger).log(0xc0002b8170, 0x4, {0x10e5750?, 0xc0005f1190?}, {0xc0005f1190?, 0x0?, 0x1000000000000?}, {0x0, 0x0, 0x0})
/go/src/github.com/hyperledger/fabric/vendor/go.uber.org/zap/sugar.go:227 +0xee
go.uber.org/zap.(*SugaredLogger).Panicf(...)
/go/src/github.com/hyperledger/fabric/vendor/go.uber.org/zap/sugar.go:159
github.com/hyperledger/fabric/common/flogging.(*FabricLogger).Panicf(...)
/go/src/github.com/hyperledger/fabric/common/flogging/zap.go:74
github.com/hyperledger/fabric/orderer/common/server.loadLocalMSP(0xf363e0?)
/go/src/github.com/hyperledger/fabric/orderer/common/server/main.go:778 +0x2a8
github.com/hyperledger/fabric/orderer/common/server.Main()
/go/src/github.com/hyperledger/fabric/orderer/common/server/main.go:93 +0x1ce
main.main()
/go/src/github.com/hyperledger/fabric/cmd/orderer/main.go:15 +0x17
I tried the following already:
- enabled NoExpirationChecks
- renew Enrollment Cert Expiration (doesn’t work)
Is there anything that I am missing here?
New contributor
jjj is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.