mirror of
https://github.com/hyperledger/fabric-samples.git
synced 2026-06-17 15:35:09 +00:00
caf5c33db2
This sample uses fabric-ca to run an end-to-end test similar to the BYFN sample. However, instead of using cryptogen, it uses fabric-ca. All private keys are generated dynamically in the container in which they are used. This sample also demonstrates how to use abac (Attribute-Based Access Control) to make access decisions. See chaincode/abac/abac.go. Change-Id: I5eddc9e35908e409ac07266c3183ce89a5a6cd82 Signed-off-by: Keith Smith <bksmith@us.ibm.com>
37 lines
1 KiB
Bash
Executable file
37 lines
1 KiB
Bash
Executable file
#!/bin/bash
|
|
#
|
|
# Copyright IBM Corp. All Rights Reserved.
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
set -e
|
|
|
|
source $(dirname "$0")/env.sh
|
|
|
|
# Wait for setup to complete sucessfully
|
|
awaitSetup 10
|
|
|
|
# Enroll to get orderer's TLS cert (using the "tls" profile)
|
|
fabric-ca-client enroll -d --enrollment.profile tls -u $ENROLLMENT_URL -M /tmp/tls --csr.hosts $ORDERER_HOST
|
|
|
|
# Copy the TLS key and cert to the appropriate place
|
|
TLSDIR=$ORDERER_HOME/tls
|
|
mkdir -p $TLSDIR
|
|
cp /tmp/tls/keystore/* $ORDERER_GENERAL_TLS_PRIVATEKEY
|
|
cp /tmp/tls/signcerts/* $ORDERER_GENERAL_TLS_CERTIFICATE
|
|
rm -rf /tmp/tls
|
|
|
|
# Enroll again to get the orderer's enrollment certificate (default profile)
|
|
fabric-ca-client enroll -d -u $ENROLLMENT_URL -M $ORDERER_GENERAL_LOCALMSPDIR
|
|
|
|
# Finish setting up the local MSP for the orderer
|
|
finishMSPSetup $ORDERER_GENERAL_LOCALMSPDIR
|
|
copyAdminCert $ORDERER_GENERAL_LOCALMSPDIR
|
|
|
|
# Wait for the genesis block to be created
|
|
dowait "genesis block to be created" 10 $SETUP_LOGFILE $ORDERER_GENERAL_GENESISFILE
|
|
|
|
# Start the orderer
|
|
env | grep ORDERER
|
|
orderer
|