Commits on Nov 9, 2021

1. Add logging for identity, policy, and signature troubleshooting …

   Most identity, policy, and signature issues return a fairly generic error
   message to the user, e.g. "not authorized".
   This is often intentional so as to not disclose information to malicious users that
   may be probing for information about the system.
   
   This commit adds logging on the orderer and peer side so that identity issues
   can more easily be troubleshooted by users setting up sample networks,
   and by administrators and SREs in production networks.
   
   For any identity, policy, or signature error, the identity is now logged in a warning message.
   Additionally, the identity of every signature that is verified can be seen if tracing is enabled.
   
   The new logging can help with the following types of issue resolution:
   User cert and MSP membership errors
   Determine which user is unauthorized to perform an action
   Determine which MSPs and user signatures are included in a config transaction that was invalidated
   Determine which peers participated in an endorsement invalidation
   Determine which peer signature doesn't match the others in a proposal response
   
   Signed-off-by: David Enyeart <enyeart@us.ibm.com>

   

   denyeart committed Nov 9, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for 3cf1e05
   • Browse repository at this point

   Copy the full SHA

   3cf1e05 View commit details

   Browse the repository at this point in the history