为Hyperledger Fabric沙发床启用SSL

debugcn 发表于 Dev

普亚·庄家

我想使用启用了SSL的bedDB（V.2.3.1），因此向/opt/couchdb/etc/local.d/docker.ini文件中添加了[ssl]部分，如下所示：

[ssl]
port = 6984
enable = true
cert_file = /etc/hyperledger/fabric/tls/server.crt
key_file = /etc/hyperledger/fabric/tls/server.key
cacert_file = /etc/hyperledger/fabric/tls/ca.crt

[daemons]
httpsd = {couch_httpd, start_link, [https]}

[admins]
Admin = ...

[couchdb]
uuid = ...

但我无法使用https访问webUI！有这个错误：

This site can’t provide a secure connection
"IP" uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.

这是日志：

[error] 2020-05-17T06:52:18.046389Z nonode@nohost <0.19077.3> -------- SSL: hello: tls_handshake.erl:127:Fatal error: handshake failure - malformed_handshake_data

[error] 2020-05-17T06:52:18.046426Z nonode@nohost <0.18899.3> -------- application: mochiweb, "Accept failed error", "{error,{tls_alert,\"handshake failure\"}}"
[error] 2020-05-17T06:52:18.046508Z nonode@nohost <0.18899.3> -------- CRASH REPORT Process  (<0.18899.3>) with 0 neighbors exited with reason: {error,accept_failed} at mochiweb_acceptor:init/4(line:75) <= proc_lib:init_p_do_apply/3(line:247); initial_call: {mochiweb_acceptor,init,['Argument__1','Argument__2',...]}, ancestors: [https,couch_secondary_services,couch_sup,<0.202.0>], messages: [], links: [<0.253.0>], dictionary: [], trap_exit: false, status: running, heap_size: 1598, stack_size: 27, reductions: 954

有人能帮帮我吗？

普亚·庄家

我找到了解决方案，并写了一篇关于它的文章：

https://medium.com/@pouyashojaei85/enabling-ssl-for-docker-couchdb-container-127388eca1a8

本文收集自互联网，转载请注明来源。

如有侵权，请联系[email protected] 删除。