在 Hypeledger Fabric 中重新启动 ca 服务器时出错

Question

Intermediate ca server docker container gets exited somehow so I have tried to restart the corresponding docker container but I'm not able to restart the service and these are the logs of the docker container:

Error: Validation of certificate and key failed: Invalid certificate and/or key in files '/tlsca/ca-cert.pem' and '/etc/hyperledger/fabric-ca-server-config/ica.consigner.biltilink.com.key.pem': Public key and private key do not match

Can someone please help me with this as to how to restart the service properly because I'm confused how the certificates gets changed while I'm just restarting the service. And please help me with this so that I can restart my service.

Answer 1

If you restart the CA server and want to all previously certificates to continue to work with the CA, you MUST use the same cert/key pair as before in fabric-ca-server.config file because it will create new set of keys and certificates if previously certificate and key not points n server configuration file. So docker-comose file have volume section for persistent keys, cert and fabric-ca-server.config file