ssl - Hyperledger Fabric - 调用错误/TLS 握手失败，错误为 tls : first record does not look like a TLS handshake

Question

范围:这是一个具有一个 channel 的网络，该 channel 由 3 个组织组成，每个组织 1 个 anchor 节点，每个组织 1 个 CA 和每个组织 1 个 MSP。

我在我的 Hyperledger Fabric 网络上遇到了一个与 TLS 握手过程相关的问题，当我通过 CLI 容器对我的链代码(已正确安装和实例化)进行 invoke 调用时发生该问题。

订购者

[core.comm] ServerHandshake -> ERRO 01b TLS handshake failed with error tls: first record does not look like a TLS handshake {"server": "Orderer", "remote address": "192.168.0.23:55806"}

命令行

Error: error sending transaction for invoke: could not send: EOF - proposal response: version:1 response:<status:200 >

我找不到解决方案，所以任何形式的帮助都会很棒。

编辑:当我更新 anchor 节点时，我在排序容器中也有这样的警告:

    2018-12-12 14:06:00.518 UTC [common.deliver] Handle -> WARN 014 Error reading from 192.168.32.23:43938: rpc error: code = Canceled desc = context canceled
2018-12-12 14:06:00.518 UTC [comm.grpc.server] 1 -> INFO 016 streaming call completed {"grpc.start_time": "2018-12-12T14:06:00.509Z", "grpc.service": "orderer.AtomicBroadcast", "grpc.method": "Deliver", "grpc.peer_address": "192.168.32.23:43938", "error": "rpc error: code = Canceled desc = context canceled", "grpc.code": "Canceled", "grpc.call_duration": "8.958614ms"}
2018-12-12 14:06:00.518 UTC [orderer.common.broadcast] Handle -> WARN 015 Error reading from 192.168.32.23:43940: rpc error: code = Canceled desc = context canceled
2018-12-12 14:06:00.518 UTC [comm.grpc.server] 1 -> INFO 017 streaming call completed {"grpc.start_time": "2018-12-12T14:06:00.511Z", "grpc.service": "orderer.AtomicBroadcast", "grpc.method": "Broadcast", "grpc.peer_address": "192.168.32.23:43940", "error": "rpc error: code = Canceled desc = context canceled", "grpc.code": "Canceled", "grpc.call_duration": "7.13278ms"}
2018-12-12 14:06:10.328 UTC [comm.grpc.server] 1 -> INFO 018 streaming call completed {"grpc.start_time": "2018-12-12T14:06:05.692Z", "grpc.service": "orderer.AtomicBroadcast", "grpc.method": "Deliver", "grpc.peer_address": "192.168.32.13:40886", "grpc.peer_subject": "CN=peer1.farmer.supply-chain-network.com,L=San Francisco,ST=California,C=US", "error": "context finished before block retrieved: context canceled", "grpc.code": "Unknown", "grpc.call_duration": "4.636199388s"}

提前致谢

Answer 1

似乎订购者期待 tls 连接，但 cli 没有与 tls 连接。您是否正确指定了 --tls --cafile <orderer-cert>在调用期间？