[root@localhost admin]# fabric-ca-client register --id.name Jim --id.type user --id.affiliation org1.department1 --id.attrs ‘hf.Revoker=true,foo=bar‘
2018/06/14 07:24:45 [INFO] Configuration file location: /root/ca/fabric-ca-client-config.yaml
Password: iQEoXaLRWmNL

 1 [root@localhost bin]# tree -F
 2 .
 3 ├── ca-cert.pem
 4 ├── fabric-ca-client*
 5 ├── fabric-ca-server*
 6 ├── fabric-ca-server-config.yaml
 7 ├── fabric-ca-server.db
 8 └── msp/
 9     └── keystore/
10         └── 73c8509d3f8b33d60ba9825a0ddeb10dc6a12fb22fc8912c7661e7a639baac0c_sk*
11 
12 2 directories, 6 files

# Version of config file
version: 1.1.1-snapshot-e656889
# Server‘s listening port (default: 7054)
port: 7054
# Enables debug logging (default: false)
debug: false
# Size limit of an acceptable CRL in bytes (default: 512000)
crlsizelimit: 512000
tls:
  # Enable TLS (default: false)
  enabled: false
  # TLS for the server‘s listening port
  certfile:
  keyfile:
  clientauth:
    type: noclientcert
    certfiles:
ca:
  # Name of this CA
  name:
  # Key file (is only used to import a private key into BCCSP)
  keyfile:
  # Certificate file (default: ca-cert.pem)
  certfile:
  # Chain file
  chainfile:
crl:
  # Specifies expiration for the generated CRL. The number of hours
  # specified by this property is added to the UTC time, the resulting time
  # is used to set the ‘Next Update‘ date of the CRL.
  expiry: 24h
registry:
  # Maximum number of times a password/secret can be reused for enrollment
  # (default: -1, which means there is no limit)
  maxenrollments: -1
  # Contains identity information which is used when LDAP is disabled
  identities:
     - name: admin
       pass: adminpw
       type: client
       affiliation: ""
       attrs:
          hf.Registrar.Roles: "peer,orderer,client,user"
          hf.Registrar.DelegateRoles: "peer,orderer,client,user"
          hf.Revoker: true
          hf.IntermediateCA: true
          hf.GenCRL: true
          hf.Registrar.Attributes: "*"
          hf.AffiliationMgr: true
db:
  type: sqlite3
  datasource: fabric-ca-server.db
  tls:
      enabled: false
      certfiles:
      client:
        certfile:
        keyfile:
ldap:
   # Enables or disables the LDAP client (default: false)
   # If this is set to true, the "registry" section is ignored.
   enabled: false
   # The URL of the LDAP server
   url: ldap://<adminDN>:<adminPassword>@<host>:<port>/<base>
   # TLS configuration for the client connection to the LDAP server
   tls:
      certfiles:
      client:
         certfile:
         keyfile:
   # Attribute related configuration for mapping from LDAP entries to Fabric CA attributes
   attribute:
      # ‘names‘ is an array of strings containing the LDAP attribute names which are
      # requested from the LDAP server for an LDAP identity‘s entry
      names: [‘uid‘,‘member‘]
      converters:
         - name:
           value:
      maps:
         groups:
            - name:
              value:
affiliations:
   org1:
      - department1
      - department2
   org2:
      - department1
signing:
    default:
      usage:
        - digital signature
      expiry: 8760h
    profiles:
      ca:
         usage:
           - cert sign
           - crl sign
         expiry: 43800h
         caconstraint:
           isca: true
           maxpathlen: 0
      tls:
         usage:
            - signing
            - key encipherment
            - server auth
            - client auth
            - key agreement
         expiry: 8760h
csr:
   cn: fabric-ca-server
   names:
      - C: US
        ST: "North Carolina"
        L:
        O: Hyperledger
        OU: Fabric
   hosts:
     - localhost.localdomain
     - localhost
   ca:
      expiry: 131400h
      pathlength: 1
bccsp:
    default: SW
    sw:
        hash: SHA2
        security: 256
        filekeystore:
            # The directory used for the software file-based keystore
            keystore: msp/keystore
cacount:
cafiles:
intermediate:
  parentserver:
    url:
    caname:
  enrollment:
    hosts:
    profile:
    label:
  tls:
    certfiles:
    client:
      certfile:
      keyfile:

 1 ├── api
 2 ├── bin
 3 ├── CHANGELOG.md
 4 ├── ci.properties
 5 ├── cmd
 6 ├── CODE_OF_CONDUCT.md
 7 ├── CONTRIBUTING.md
 8 ├── docker
 9 ├── docker-env.mk
10 ├── docs
11 ├── images
12 ├── lib
13 ├── LICENSE
14 ├── MAINTAINERS.md
15 ├── Makefile
16 ├── README.md
17 ├── release_notes
18 ├── scripts
19 ├── swagger
20 ├── test
21 ├── testdata
22 ├── util
23 └── vendor

fabric-ca-server-config.yaml 

  1 # Version of config file
  2 version: 1.1.1-snapshot-e656889
  3 
  4 # Server‘s listening port (default: 7054)
  5 port: 7054
  6 
  7 # Enables debug logging (default: false)
  8 debug: false
  9 
 10 # Size limit of an acceptable CRL in bytes (default: 512000)
 11 crlsizelimit: 512000
 12 
 13 tls:
 14   # Enable TLS (default: false)
 15   enabled: false
 16   # TLS for the server‘s listening port
 17   certfile:
 18   keyfile:
 19   clientauth:
 20     type: noclientcert
 21     certfiles:
 22 
 23 ca:
 24   # Name of this CA
 25   name:
 26   # Key file (is only used to import a private key into BCCSP)
 27   keyfile:
 28   # Certificate file (default: ca-cert.pem)
 29   certfile:
 30   # Chain file
 31   chainfile:
 32 
 33 
 34 crl:
 35   expiry: 24h
 36 
 37 
 38 registry:
 39   # Maximum number of times a password/secret can be reused for enrollment
 40   # (default: -1, which means there is no limit)
 41   maxenrollments: -1
 42 
 43   # Contains identity information which is used when LDAP is disabled
 44   identities:
 45      - name: admin
 46        pass: adminpw
 47        type: client
 48        affiliation: ""
 49        attrs:
 50           hf.Registrar.Roles: "peer,orderer,client,user"
 51           hf.Registrar.DelegateRoles: "peer,orderer,client,user"
 52           hf.Revoker: true
 53           hf.IntermediateCA: true
 54           hf.GenCRL: true
 55           hf.Registrar.Attributes: "*"
 56           hf.AffiliationMgr: true
 57 
 58 
 59 db:
 60   type: sqlite3
 61   datasource: fabric-ca-server.db
 62   tls:
 63       enabled: false
 64       certfiles:
 65       client:
 66         certfile:
 67         keyfile:
 68 
 69 
 70 ldap:
 71    # Enables or disables the LDAP client (default: false)
 72    # If this is set to true, the "registry" section is ignored.
 73    enabled: false
 74    # The URL of the LDAP server
 75    url: ldap://<adminDN>:<adminPassword>@<host>:<port>/<base>
 76    # TLS configuration for the client connection to the LDAP server
 77    tls:
 78       certfiles:
 79       client:
 80          certfile:
 81          keyfile:
 82    # Attribute related configuration for mapping from LDAP entries to Fabric CA attributes
 83    attribute:
 84       names: [‘uid‘,‘member‘]
 85       converters:
 86          - name:
 87            value:
 88       maps:
 89          groups:
 90             - name:
 91               value:
 92 affiliations:
 93    org1:
 94       - department1
 95       - department2
 96    org2:
 97       - department1
 98 signing:
 99     default:
100       usage:
101         - digital signature
102       expiry: 8760h
103     profiles:
104       ca:
105          usage:
106            - cert sign
107            - crl sign
108          expiry: 43800h
109          caconstraint:
110            isca: true
111            maxpathlen: 0
112       tls:
113          usage:
114             - signing
115             - key encipherment
116             - server auth
117             - client auth
118             - key agreement
119          expiry: 8760h
120 csr:
121    cn: fabric-ca-server
122    names:
123       - C: US
124         ST: "North Carolina"
125         L:
126         O: Hyperledger
127         OU: Fabric
128    hosts:
129      - localhost.localdomain
130      - localhost
131    ca:
132       expiry: 131400h
133       pathlength: 1
134 bccsp:
135     default: SW
136     sw:
137         hash: SHA2
138         security: 256
139         filekeystore:
140             # The directory used for the software file-based keystore
141             keystore: msp/keystore
142 cacount:
143 cafiles:
144
145 intermediate:
146   parentserver:
147     url:
148     caname:
149 
150   enrollment:
151     hosts:
152     profile:
153     label:
154   tls:
155     certfiles:
156     client:
157       certfile:
158       keyfile: