blockchain-explorer icon indicating copy to clipboard operation
blockchain-explorer copied to clipboard

Missing instructions on how to create a proper identity for the explorer

Open jeanmarc opened this issue 1 year ago • 1 comments

What would you like to be added?

Currently, the installation instructions for blockchain explorer indicate that I need to copy the private key of my organisation to the explorer environment, to allow it to connect to the network. From a security perspective, I prefer to have private keys present in at most one (1) location, and not share these keys between applications/components/containers that have different roles.

It would be appreciated if clear instructions are added on how to generate a new set of credentials that can be used by the explorer, instead of sharing the organisation admin key.

Why is this needed?

Security auditors will consider the replication of private keys as a security risk, which will make it much harder for us to get approvals for running hyperledger fabric based solutions.

jeanmarc avatar Mar 04 '24 14:03 jeanmarc

Hi @jeanmarc In order to connect the Explorer app with Fabric-network, it required private_key and signcerts of Fabric-User provided by MSP you can use credentials of User in Explorer app instead of Admin credentials, to connect with Fabric-network. (path ../fabric-samples/test-network/organizations/peerOrganizations/org1.example.com/users/[email protected]/msp/keystore/prv_sk for test-network)

krriscode avatar Mar 14 '24 07:03 krriscode