無法在Hyperledger Sawtooth中啟動驗證器節點。 Docker無法驗證證書

Question

我正在嘗試命令docker-compose up來在Ubuntu計算機上的Hyperledger Sawtooth設置中啟動Validator節點。

我正在我公司的代理后面運行此命令。

當我使用命令docker-compose up ，我得到以下輸出：

    Building validator
Step 1/15 : FROM ubuntu:xenial
 ---> 4a689991aa24
Step 2/15 : RUN echo "deb http://repo.sawtooth.me/ubuntu/ci xenial universe" >> /etc/apt/sources.list  && (apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 8AA7AF1F1091A5FD  || apt-key adv --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys 8AA7AF1F1091A5FD)  && apt-get update
 ---> Using cache
 ---> 59b3dd0413ec
Step 3/15 : RUN apt-get install -y -q --allow-downgrades     git     python3     python3-stdeb
 ---> Using cache
 ---> fa792ef3800a
Step 4/15 : RUN apt-get install -y -q --allow-downgrades     python3-grpcio     python3-grpcio-tools     python3-protobuf
 ---> Using cache
 ---> b21e9522d61d
Step 5/15 : RUN apt-get install -y -q --allow-downgrades     python3-cbor     python3-colorlog     python3-cryptography>=1.7.1     python3-dev     python3-lmdb     python3-netifaces=0.10.4-0.1build2     python3-pyformance     python3-secp256k1     python3-toml     python3-yaml     python3-zmq     unzip
 ---> Using cache
 ---> bff0f3b39a0a
Step 6/15 : RUN curl -OLsS https://github.com/google/protobuf/releases/download/v3.5.1/protoc-3.5.1-linux-x86_64.zip  && unzip protoc-3.5.1-linux-x86_64.zip -d protoc3  && rm protoc-3.5.1-linux-x86_64.zip
 ---> Running in 37e4dd702373
curl: (60) server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.
ERROR: Service 'validator' failed to build: The command '/bin/sh -c curl -OLsS https://github.com/google/protobuf/releases/download/v3.5.1/protoc-3.5.1-linux-x86_64.zip  && unzip protoc-3.5.1-linux-x86_64.zip -d protoc3  && rm protoc-3.5.1-linux-x86_64.zip' returned a non-zero code: 60

它說服務器驗證失敗，並在步驟（6/15）停止。

我該如何解決？

Answer 1

您需要為存儲庫安裝密鑰。 對於穩定的存儲庫，請使用： $ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 8AA7AF1F1091A5FD $ sudo add-apt-repository 'deb [arch=amd64] http://repo.sawtooth.me/ubuntu/bumper/stable xenial universe'

對於每晚的開發存儲庫，請使用： $ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 44FC67F19B2466EA $ sudo apt-add-repository 'deb [arch=amd64] http://repo.sawtooth.me/ubuntu/nightly xenial universe'