Renewing expired certificates in Oracle Blockchain Platform Cloud Service (OBP) instances
(Doc ID 2571520.1)
Last updated on MAY 05, 2021
Applies to:
Blockchain Platform Cloud Service - Version N/A to N/AInformation in this document applies to any platform.
Details
Scope: This note is relevant only for customers whose certificate is expiring on and have received a notification from Oracle.
Action is required for smooth ongoing operation of Oracle Blockchain Platform Cloud Service (OBP) instance(s). Reach out to support to find out the impacted OBP service instance names prior to proceeding with the following instructions. Please go through this document in its entirety and take appropriate actions.
The default administration and user certificates used in OBPCS instances expire and need to be renewed periodically. The new certificates have been added and are valid for 1 year.
Actions
Following actions must be taken to ensure smooth operation of your OBP instance(s):
1. Download new admin certificate from OBP Console and verify the new certificate with command "openssl x509 -in <cert_file> -text -noout"
2. Replace existing certificate with the new one in your applications.
3. If your OBP instance is participating in a network of multiple instances/organizations, the network configuration needs to be updated as per below. This process is a subset of the process you used when the network was initially established:
a. From your OBP “founder instance”, export orderer information into a JSON file. This can be done from the Network tab of the OBP Console.
b. From each of your OBP “participant” instance, export organization information into a JSON file from the “Network” tab of your OBP console.
c. For all “participant” instances, import JSON file from the “founder” instance.
d. For the “founder” instance, import JSON file from all “participant” instances. The JSON file from participants can be imported one at a time.
4. If you have HL-Fabric Fabric Client SDK based client applications and client certificates are expiring, Reenroll client certificates to OPB instance.
Certificate related query can look the FAQ document <Note 2572708.1>
Contacts
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Details |
| Actions |
| Contacts |
| References |