Share
Explore

icon picker
Certificate Rotation in Fabric 2.x

Renew Enrollment and TLS Certificates
Adhav Pavan

Note: This document is made for Renewing Certificate for expired Hyperledger Fabric Network


Steps

Create a backup of all persisted data on Hyperledger fabric
Create a dummy network with same configuration and same data(assuming network is down cause of expired )
Certificate Authority
Renew tls Certificate for certificate authority
Verify CA operation with new certificate
Orderer/Peers
Create new Enrolment and tls certificates
Add additional env vars in orderer service(check when certificates got expired)
First Change msp with newly created msp of all component(peer & Orderer) and restart services
Configuration Update for Changing tls certs for orderer
Total channels count
Total orderers count
Total Configuration update require = a*b
Make configuration update for system channel and then for all application channel
Enroll and register new user and verify network by invoking transaction.


⁠
⁠
Add task
⁠
⁠
To-do list
0
Done
Task
Due date
Who
1
Replicate Same Network for Testing
10/15/2022
Adhav Pavan
2
Check Network topology
10/15/2022
Adhav Pavan
3
Renew Fabric Component Enrollment and TLS Certificates
10/15/2022
Adhav Pavan
4
Renew CA TLS Certificates
10/19/2022
Adhav Pavan
5
Verify Network
10/21/2022
Adhav Pavan
There are no rows in this table
⁠

Want to print your doc?
This is not the way.
Try clicking the ⋯ next to your doc name or using a keyboard shortcut (
CtrlP
) instead.