问题
I am working in a company where we are using the hyperledger fabric to build our application. we have been using the fabric CA till now. Now for the production phase we are planning to move to third party ca provider.
I have read the documentation of the Fabric CA (https://hyperledger-fabric-ca.readthedocs.io/en/release-1.4/) for understanding how it works. I have been looking in the Stackoverflow Fabric tag (https://stackoverflow.com/questions/tagged/hyperledger-fabric) if i could find some relevant solution but i wasn't able to find it.
回答1:
Yes you can use other ca providers, as long as they give the x.509 certificates you can use them. In the end what the fabric CA does is:
registration of identities, or connects to LDAP as the user registry
issuance of Enrollment Certificates (ECerts)
certificate renewal and revocation
You can use other providers such as hashicorp vault.
https://learn.hashicorp.com/vault/secrets-management/sm-pki-engine
来源:https://stackoverflow.com/questions/57673514/is-it-possible-to-use-a-third-party-ca-in-hyperledger-fabrics-for-production-pha