[root@localhost admin]# fabric-ca-client register --id.name Jim --id.type user --id.affiliation org1.department1 --id.attrs 'hf.Revoker=true,foo=bar'
2018/06/14 07:24:45 [INFO] Configuration file location: /root/ca/fabric-ca-client-config.yaml
Password: iQEoXaLRWmNL

 1 [root@localhost bin]# tree -F
 2 .
 3 ├── ca-cert.pem
 4 ├── fabric-ca-client*
 5 ├── fabric-ca-server*
 6 ├── fabric-ca-server-config.yaml
 7 ├── fabric-ca-server.db
 8 └── msp/
 9     └── keystore/
10         └── 73c8509d3f8b33d60ba9825a0ddeb10dc6a12fb22fc8912c7661e7a639baac0c_sk*
11
12 2 directories, 6 files

# Version of config file
version: 1.1.1-snapshot-e656889
# Server's listening port (default: 7054)
port: 7054
# Enables debug logging (default: false)
debug: false
# Size limit of an acceptable CRL in bytes (default: 512000)
crlsizelimit: 512000
tls:# Enable TLS (default: false)enabled: false# TLS for the server's listening portcertfile:keyfile:clientauth:type: noclientcertcertfiles:
ca:# Name of this CAname:# Key file (is only used to import a private key into BCCSP)keyfile:# Certificate file (default: ca-cert.pem)certfile:# Chain filechainfile:
crl:# Specifies expiration for the generated CRL. The number of hours# specified by this property is added to the UTC time, the resulting time# is used to set the 'Next Update' date of the CRL.expiry: 24h
registry:# Maximum number of times a password/secret can be reused for enrollment# (default: -1, which means there is no limit)maxenrollments: -1# Contains identity information which is used when LDAP is disabledidentities:- name: adminpass: adminpwtype: clientaffiliation: ""attrs:hf.Registrar.Roles: "peer,orderer,client,user"hf.Registrar.DelegateRoles: "peer,orderer,client,user"hf.Revoker: truehf.IntermediateCA: truehf.GenCRL: truehf.Registrar.Attributes: "*"hf.AffiliationMgr: true
db:type: sqlite3datasource: fabric-ca-server.dbtls:enabled: falsecertfiles:client:certfile:keyfile:
ldap:# Enables or disables the LDAP client (default: false)# If this is set to true, the "registry" section is ignored.enabled: false# The URL of the LDAP serverurl: ldap://<adminDN>:<adminPassword>@<host>:<port>/<base># TLS configuration for the client connection to the LDAP servertls:certfiles:client:certfile:keyfile:# Attribute related configuration for mapping from LDAP entries to Fabric CA attributesattribute:# 'names' is an array of strings containing the LDAP attribute names which are# requested from the LDAP server for an LDAP identity's entrynames: ['uid','member']converters:- name:value:maps:groups:- name:value:
affiliations:org1:- department1- department2org2:- department1
signing:default:usage:- digital signatureexpiry: 8760hprofiles:ca:usage:- cert sign- crl signexpiry: 43800hcaconstraint:isca: truemaxpathlen: 0tls:usage:- signing- key encipherment- server auth- client auth- key agreementexpiry: 8760h
csr:cn: fabric-ca-servernames:- C: USST: "North Carolina"L:O: HyperledgerOU: Fabrichosts:- localhost.localdomain- localhostca:expiry: 131400hpathlength: 1
bccsp:default: SWsw:hash: SHA2security: 256filekeystore:# The directory used for the software file-based keystorekeystore: msp/keystore
cacount:
cafiles:
intermediate:parentserver:url:caname:enrollment:hosts:profile:label:tls:certfiles:client:certfile:keyfile:

 1 ├── api
 2 ├── bin
 3 ├── CHANGELOG.md
 4 ├── ci.properties
 5 ├── cmd
 6 ├── CODE_OF_CONDUCT.md
 7 ├── CONTRIBUTING.md
 8 ├── docker
 9 ├── docker-env.mk
10 ├── docs
11 ├── images
12 ├── lib
13 ├── LICENSE
14 ├── MAINTAINERS.md
15 ├── Makefile
16 ├── README.md
17 ├── release_notes
18 ├── scripts
19 ├── swagger
20 ├── test
21 ├── testdata
22 ├── util
23 └── vendor

fabric-ca-server-config.yaml 

  1 # Version of config file2 version: 1.1.1-snapshot-e6568893 4 # Server's listening port (default: 7054)5 port: 70546 7 # Enables debug logging (default: false)8 debug: false 9 10 # Size limit of an acceptable CRL in bytes (default: 512000) 11 crlsizelimit: 512000 12 13 tls: 14  # Enable TLS (default: false) 15  enabled: false 16 # TLS for the server's listening port 17  certfile: 18  keyfile: 19  clientauth: 20  type: noclientcert 21  certfiles: 22 23 ca: 24 # Name of this CA 25  name: 26  # Key file (is only used to import a private key into BCCSP) 27  keyfile: 28 # Certificate file (default: ca-cert.pem) 29  certfile: 30  # Chain file 31  chainfile: 32 33 34 crl: 35  expiry: 24h 36 37 38 registry: 39 # Maximum number of times a password/secret can be reused for enrollment 40 # (default: -1, which means there is no limit) 41 maxenrollments: -1 42 43  # Contains identity information which is used when LDAP is disabled 44  identities: 45 - name: admin 46  pass: adminpw 47  type: client 48 affiliation: "" 49  attrs: 50 hf.Registrar.Roles: "peer,orderer,client,user" 51 hf.Registrar.DelegateRoles: "peer,orderer,client,user" 52 hf.Revoker: true 53 hf.IntermediateCA: true 54 hf.GenCRL: true 55 hf.Registrar.Attributes: "*" 56 hf.AffiliationMgr: true 57 58 59 db: 60  type: sqlite3 61 datasource: fabric-ca-server.db 62  tls: 63 enabled: false 64  certfiles: 65  client: 66  certfile: 67  keyfile: 68 69 70 ldap: 71 # Enables or disables the LDAP client (default: false) 72 # If this is set to true, the "registry" section is ignored. 73 enabled: false 74  # The URL of the LDAP server 75 url: ldap://<adminDN>:<adminPassword>@<host>:<port>/<base> 76 # TLS configuration for the client connection to the LDAP server 77  tls: 78  certfiles: 79  client: 80  certfile: 81  keyfile: 82 # Attribute related configuration for mapping from LDAP entries to Fabric CA attributes 83  attribute: 84 names: ['uid','member'] 85  converters: 86 - name: 87  value: 88  maps: 89  groups: 90 - name: 91  value: 92 affiliations: 93  org1: 94 - department1 95 - department2 96  org2: 97 - department1 98 signing: 99 default: 100  usage: 101 - digital signature 102  expiry: 8760h 103  profiles: 104  ca: 105  usage: 106 - cert sign 107 - crl sign 108  expiry: 43800h 109  caconstraint: 110 isca: true 111 maxpathlen: 0 112  tls: 113  usage: 114 - signing 115 - key encipherment 116 - server auth 117 - client auth 118 - key agreement 119  expiry: 8760h 120 csr: 121 cn: fabric-ca-server 122  names: 123 - C: US 124 ST: "North Carolina" 125  L: 126  O: Hyperledger 127  OU: Fabric 128  hosts: 129 - localhost.localdomain 130 - localhost 131  ca: 132  expiry: 131400h 133 pathlength: 1 134 bccsp: 135 default: SW 136  sw: 137  hash: SHA2 138 security: 256 139  filekeystore: 140 # The directory used for the software file-based keystore 141 keystore: msp/keystore 142 cacount: 143 cafiles: 144 145 intermediate: 146  parentserver: 147  url: 148  caname: 149 150  enrollment: 151  hosts: 152  profile: 153  label: 154  tls: 155  certfiles: 156  client: 157  certfile: 158 keyfile: