进入测试目录

docker-compose-cli.yaml为org1添加ca容器

ca0: 
  image: hyperledger/fabric-ca 
  environment: 
    - FABRIC_CA_HOME=/etc/hyperledger/fabric-ca-server 
    - FABRIC_CA_SERVER_CA_NAME=ca0 
    - FABRIC_CA_SERVER_TLS_ENABLED=false 
  ports: 
    - "7054:7054" 
  command: sh -c 'fabric-ca-server start --ca.certfile  --ca.keyfile /etc/hyperledger/fabric-ca-server-config/${PRIVATE_KEY} -b admin:adminpw -d' 
  volumes: 
    -  
  container_name: ca0
  
ca.certfile CA的根证书
ca.keyfile 给新用户签发证书时的私钥
-b参数指定了CA Client连接CA Server时使用的用户名密码

修改network_setup.sh脚本带入CA容器启动的参数

 
privName="" 
for file_a in ${folder}/* 
do 
  temp_file=`basename $file_a`

  if [ ${temp_file##*.} != "pem" ];then 
    privName=$temp_file 
  fi 
done 
echo $privName

CHANNEL_NAME=$CH_NAME TIMEOUT=$CLI_TIMEOUT docker-compose -f $COMPOSE_FILE up -d 2>&1
修改为
CHANNEL_NAME=$CH_NAME TIMEOUT=$CLI_TIMEOUT PRIVATE_KEY=$privName docker-compose -f $COMPOSE_FILE up -d 2>&1

启动fabric网络

./network_setup.sh up

下载并安装Fabric CA Client

注册认证管理员

注册新用户

fabric-ca-client register --id.name devin --id.type user --id.affiliation org1.department1 --id.attrs 'hf.Revoker=true,foo=bar'
2017/10/19 16:44:57 [INFO] User provided config file: /root/ca/fabric-ca-client-config.yaml
2017/10/19 16:44:57 [INFO] Configuration file location: /root/ca/fabric-ca-client-config.yaml
Password: vpjiGEcqJUHN

用密码vpjiGEcqJUHN为用户devin生成私钥和证书

拷贝新用户私钥和证书

mkdir devin/msp/admincerts
cp devin/msp/signcerts/cert.pem devin/msp/admincerts/

创建测试链码用于验证用户

package main

import (
    "bytes"
    "crypto/x509"
    "encoding/pem"
    "fmt"
    
    pb 
)

type SimpleChaincode struct {
}

func (t *SimpleChaincode) Init(stub shim.ChaincodeStubInterface) pb.Response {
    return shim.Success(nil)
}

func (t *SimpleChaincode) Invoke(stub shim.ChaincodeStubInterface) pb.Response {
    function, args := stub.GetFunctionAndParameters()
    fmt.Println("invoke is running " + function)
    if function == "cert" {
        return t.testCertificate(stub, args)
    }

    return shim.Error("Received unknown function invocation")
}

func (t *SimpleChaincode) testCertificate(stub shim.ChaincodeStubInterface, args []string) pb.Response {
    creatorByte, _ := stub.GetCreator()
    certStart := bytes.IndexAny(creatorByte, "-----")
    if certStart == -1 {
        fmt.Errorf("No certificate found")
    }

    certText := creatorByte[certStart:]
    bl, _ := pem.Decode(certText)
    if bl == nil {
        fmt.Errorf("Could not decode the PEM structure")
    }
    fmt.Println(string(certText))

    cert, err := x509.ParseCertificate(bl.Bytes)
    if err != nil {
        fmt.Errorf("ParseCertificate failed")
    }
    fmt.Println(cert)

    uname := 
    fmt.Println("Name" + uname)

    return shim.Success([]byte("Called testCertificate " + uname))
}

func main() {
    err := shim.Start(new(SimpleChaincode))
    if err != nil {
        fmt.Printf("Error starting SimpleChaincode: %s", err)
    }
}

进入cli安装并执行链码

docker exec -it cli bash

验证新用户

Query Result: Called testCertificate devin

参考文档