hyperledger-fabric - Hyperledger Fabric CA : http: TLS handshake error from 127. 0.0.1:53356:tls: 接收到长度为 21536 的超大记录

Question

我们有一个非常简单的设置，我们通过运行启动了一个 fabric-ca-server 实例

/bin/bash -c "fabric-ca-server start -b admin:adminpw"

如解释的那样在 docker 容器中，例如 here .但是当我们尝试通过运行来注册用户时

root@a7094a09a3b7:/etc/hyperledger/fabric-ca-client# fabric-ca-client enroll -u http://user:userpw@localhost:7054

我们得到以下错误:

2018/12/07 21:06:17 [INFO] generating key: &{A:ecdsa S:256}
2018/12/07 21:06:17 [INFO] encoded CSR
Error: POST failure of request: POST http://localhost:7054/enroll
{"hosts":["a7094a09a3b7"],"certificate_request":"-----BEGIN CERTIFICATE REQUEST-----\nMIIBQzCB6wIBADBfMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xp\nbmExFDASBgNVBAoTC0h5cGVybGVkZ2VyMQ8wDQYDVQQLEwZGYWJyaWMxEDAOBgNV\nBAMTB3NqYWluNjgwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASiWBUZ5vG5i9X9\nAV8fdfuxFAFsWHeg4JRpNFs/m7knB3QaDWDbbk/G53gEbgyv2scg61cYMNdLDaYK\nGi9ywX0noCowKAYJKoZIhvcNAQkOMRswGTAXBgNVHREEEDAOggxhNzA5NGEwOWEz\nYjcwCgYIKoZIzj0EAwIDRwAwRAIgTY0gn18UIsKfOLgS33F41ORAlKNz2tZS6ip5\nXS03XNICIAE3C9nhv2d4ZrCcO+7rycWLoR6wEU6cnAqZsSf1Txz4\n-----END CERTIFICATE REQUEST-----\n","profile":"","crl_override":"","label":"","NotBefore":"0001-01-01T00:00:00Z","NotAfter":"0001-01-01T00:00:00Z","CAName":""}: Post http://localhost:7054/enroll: net/http: HTTP/1.x transport connection broken: malformed HTTP response "\x15\x03\x01\x00\x02\x02\x16"

fabric-ca-server 输出显示:

http: TLS handshake error from 127.0.0.1:53356: tls: oversized record received with length 21536

想知道我们在这里做错了什么以及我们如何解决这个问题？

Answer 1

看起来您在启用 TLS 的情况下启动了 fabric-ca-server，但您没有将 TLS 与 fabric-ca-client 一起使用。您需要在 URL 中指定 https:fabric-ca-client enroll -u https://user:userpw@localhost:7054

或者，在 Fabric CA 配置中禁用 TLS。