反序列化创建者身份失败，提供的身份在Hyperledger中无效错误

Question

我一直在尝试使用SDK从已安装的链码中调用函数，但我遇到了一个问题，我正在努力解决这个问题。我构建的javascript程序是测试/集成/客户端的混合。js文件和fabcar/invoke。js。但是，当我运行脚本时，在运行事务建议时，我会遇到以下错误：

错误：[client-utils.js]： sendPeersProposal-Promise被拒绝：错误：未能反序列化创建者身份，错误提供的身份无效，Verify（）返回x509：证书由未知机构签名

我知道我的问题是由于没有使用正确的证书，但我不知道我在哪里没有使用正确的证书。我使用以下脚本创建了crypto-config目录：

 ../src/github.com/hyperledger/fabric/build//bin/cryptogen generate --config=./crypto-config.yaml
../src/github.com/hyperledger/fabric/build//bin/configtxgen --profile OrdererGenesis -outputBlock ./channel-artifacts/genesis.block
../src/github.com/hyperledger/fabric/build//bin/configtxgen --profile Channel --outputCreateChannelTx ./channel-artifacts/channel.tx -channelID $CHANNEL_NAME
../src/github.com/hyperledger/fabric/build//bin/configtxgen --profile Channel -outputAnchorPeersUpdate ./channel-artifacts/CorpMSPanchors.tx -channelID $CHANNEL_NAME -asOrg CorpMSP
../src/github.com/hyperledger/fabric/build//bin/configtxgen --profile Channel -outputAnchorPeersUpdate ./channel-artifacts/EngMSPanchors.tx -channelID $CHANNEL_NAME -asOrg EngMSP

下面是我添加同龄人和频道的代码：

    let data = fs.readFileSync(network[org].peers['peer1']['tls_cacerts']);
          var peer = client.newPeer(
                network[org].peers['peer1'].requests,
              {
                    pem: Buffer.from(data).toString(),
                    'ssl-target-name-override': network[org].peers['peer1']['server-hostname']
                });
            console.log("- Peer set up, setting up channel");
            channel = client.newChannel(utils.getConfigSetting('channelName'));
            channel.addPeer(peer);
            data = fs.readFileSync(network.orderer['tls_cacerts']);
            channel.addOrderer(client.newOrderer(network.orderer['url']), {
                pem: Buffer.from(data).toString(),
                'ssl-target-name-override': network.orderer['server-hostname']
            });
            target.push(peer);

这是我的网络配置：

{
    "tmpdir": "/tmp/hfc_test_kvs",
    "channelName" : "mychannel",
    "chaincodeId" : "blockparty",
    "network-config": {
        "orderer": {
            "url": "grpcs://orderer.example.com:7050",
            "server-hostname": "orderer.example.com",
            "tls_cacerts": "./crypto-config/ordererOrganizations/example.com/orderers/orderer.example.com/msp/tlscacerts/tlsca.example.com-cert.pem"
        },
        "org1": {
            "name": "Corp",
            "mspid": "CorpMSP",
            "username": "Admin",
            "peers": {
                "peer1": {
                    "requests": "grpcs://peer0.corp.example.com:7051",
                    "events": "grpcs://peer0.corp.example.com:7053",
                    "server-hostname": "peer0.corp.example.com",
                    "tls_cacerts": "./crypto-config/peerOrganizations/corp.example.com/peers/peer0.corp.example.com/tls/server.crt"
                },
            "admin": {
                "key": "./crypto-config/peerOrganizations/corp.example.com/users/[e-mail]/msp/keystore",
                "cert": "./crypto-config/peerOrganizations/corp.example.com/users/[e-mail]/msp/signcerts"
            }
        },

根据要求，以下是我crypto-config.yaml的一些片段：

OrdererOrgs:
  - Name: Orderer
    Domain: example.com
    Specs:
      - Hostname: orderer
PeerOrgs:
  - Name: Corp
    Domain: corp.example.com
    Specs:
      - Hostname: peer0
      - Hostname: peer1
      - Hostname: peer2
    Users:
      Count: 1

还有我的电脑。亚马尔：

Profiles:

    OrdererGenesis:
        Orderer:
            <<: *OrdererDefaults
            Organizations:
                - *OrdererOrg
        Consortiums:
            SampleConsortium:
                Organizations:
                    - *Corp
                    - *Eng
    Channel:
        Consortium: SampleConsortium
        Application:
            <<: *ApplicationDefaults
            Organizations:
                - *Corp
                - *Eng

################################################################################
#
#   Section: Organizations
#
#   - This section defines the different organizational identities which will
#   be referenced later in the configuration.
#
################################################################################
Organizations:

    # SampleOrg defines an MSP using the sampleconfig.  It should never be used
    # in production but may be used as a template for other definitions
    - &OrdererOrg
        # DefaultOrg defines the organization which is used in the sampleconfig
        # of the fabric.git development environment
        Name: OrdererOrg

        # ID to load the MSP definition as
        ID: OrdererMSP

        # MSPDir is the filesystem path which contains the MSP configuration
        MSPDir: crypto-config/ordererOrganizations/example.com/msp

    - &Corp
        # DefaultOrg defines the organization which is used in the sampleconfig
        # of the fabric.git development environment
        Name: CorpMSP

        # ID to load the MSP definition as
        ID: CorpMSP

        MSPDir: crypto-config/peerOrganizations/corp.example.com/msp

        AnchorPeers:
            # AnchorPeers defines the location of peers which can be used
            # for cross org gossip communication.  Note, this value is only
            # encoded in the genesis block in the Application section context
            - Host: peer0.corp.example.com
              Port: 7051

关于我应该使用哪种证书来正确提交交易提案，然后提交交易，有什么想法吗？我没有使用ca服务器，也没有使用docker容器。该环境的工作原理是，我可以使用对等链码调用命令调用链码，因此我知道它可以工作，但我不确定应该在客户机中使用哪个证书。newPeer和客户端。新频道功能。

非常感谢你的阅读，伯特兰。

Answer 1

我认为您需要一个客户端管理员证书。最好由corp.example.com或对等方签名#。corp.example.com.corp.example.com的证书链已经存在于您的MSPDir/ca文件夹中。所以这应该可以解决问题。