问题
Is Fabric CA an implementation of MSP? Is an MSP useless by itself?
What are the functions of the MSP and Fabric CA? And differences in those functions?
回答1:
MSP is a Membership Service Provider - pluggable interface to support variety of credentials architectures, basically offering abstraction layer for membership orchestration architecture. MSP abstraction provides:
- Concrete identity format
- User credential validation
- User credential revocation
- Signature generation and verification
While Fabric-CA used to generate certificates and keys to actually initialize MSP facilities. Fabric-CA is a default implementation of MSP interface to cover identity management.
回答2:
MSP are in charged for members certificates and authentication. MSP is pluggable, so the default Fabric MSP implementation uses PKI methods and X.509 certificates. You can use commercial CAs or Fabric CA to generate the keys and certificates needed to configure an MSP.
For more information read the Fabric CA documentation and https://hyperledger-fabric.readthedocs.io/en/latest/msp.html
回答3:
Fabric CA provides features such as: Registration of identities with roles like peer, user or application, or connects to an existing LDAP as the user registry to fetch identities of the mentioned roles.
MSP is a membership service provider defines which certificate authorities(CA's) is allowed to issue certificates.
来源：https://stackoverflow.com/questions/45682958/what-is-the-difference-between-msp-and-fabric-ca