pbmsp

type CombinedPrincipal struct {

	// Principals refer to combined principals
	Principals []*MSPPrincipal `protobuf:"bytes,1,rep,name=principals,proto3" json:"principals,omitempty"`
	// contains filtered or unexported fields
}

type HyperchainCryptoConfig struct {

	// HashAlgorithm 定义了哈希算法，目前仅支持 SHA256 哈希算法。
	// 用于计算签名 (signature) 和身份标识符 (identity identifier) 时使用。
	HashAlgorithm string `protobuf:"bytes,1,opt,name=hash_algorithm,json=hashAlgorithm,proto3" json:"hash_algorithm,omitempty"`
	// contains filtered or unexported fields
}

type HyperchainMSPConfig struct {

	// Name holds the identifier of the MSP; MSP identifier
	// is chosen by the application that governs this MSP.
	// For example, and assuming the default implementation of MSP,
	// that is X.509-based and considers a single Issuer,
	// this can refer to the Subject OU field or the Issuer OU field.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// RootCerts 存储本 msp 信任的 ca 证书的证书列表，存储格式为 ASN.1 DER PEM。
	RootCerts [][]byte `protobuf:"bytes,2,rep,name=root_certs,json=rootCerts,proto3" json:"root_certs,omitempty"`
	// IntermediateCerts 存储该 MSP 信任的中间证书列表；它们在证书验证时的使用方法如下：
	// 验证尝试从待验证证书（位于路径的一端）和根证书字段中的一个证书（位于路径的另一端）
	// 之间建立一条路径。如果路径长于 2，中间的证书将在 IntermediateCerts 池中搜索。
	IntermediateCerts [][]byte `protobuf:"bytes,3,rep,name=intermediate_certs,json=intermediateCerts,proto3" json:"intermediate_certs,omitempty"`
	// Admins 表示该 MSP 的管理员的身份。
	// x509 证书的 ASN.1 DER PEM 格式编码的数据。
	Admins [][]byte `protobuf:"bytes,4,rep,name=admins,proto3" json:"admins,omitempty"`
	// RevocationList 证书撤销列表。
	// x509 证书的 ASN.1 DER PEM 格式编码的数据。
	RevocationList [][]byte `protobuf:"bytes,5,rep,name=revocation_list,json=revocationList,proto3" json:"revocation_list,omitempty"`
	// SigningIdentity holds information on the signing identity
	// this peer is to use, and which is to be imported by the
	// MSP defined before
	SigningIdentity *SigningIdentityInfo `protobuf:"bytes,6,opt,name=signing_identity,json=signingIdentity,proto3" json:"signing_identity,omitempty"`
	// OrganizationalUnitIdentifiers holds one or more
	// hyperchain organizational unit identifiers that belong to
	// this MSP configuration
	OrganizationalUnitIdentifiers []*HyperchainOUIdentifier `` /* 150-byte string literal not displayed */
	// HyperchainCryptoConfig 定义了采用那种哈希算法。
	CryptoConfig *HyperchainCryptoConfig `protobuf:"bytes,8,opt,name=crypto_config,json=cryptoConfig,proto3" json:"crypto_config,omitempty"`
	// TlsRootCerts 该 MSP 信任的 TLS 根证书列表，x509 证书的 ASN.1 DER PEM 格式编码的数据。
	TlsRootCerts [][]byte `protobuf:"bytes,9,rep,name=tls_root_certs,json=tlsRootCerts,proto3" json:"tls_root_certs,omitempty"`
	// TlsIntermediateCerts 该 MSP 信任的 TLS 中级证书列表，x509 证书的 ASN.1 DER PEM 格式编码的数据。
	TlsIntermediateCerts [][]byte `protobuf:"bytes,10,rep,name=tls_intermediate_certs,json=tlsIntermediateCerts,proto3" json:"tls_intermediate_certs,omitempty"`
	// HyperchainNodeOus 包含 peer、admin、client、orderer 四类节点的 organizational unit 的配置信息。
	HyperchainNodeOus *HyperchainNodeOUs `protobuf:"bytes,11,opt,name=hyperchain_node_ous,json=hyperchainNodeOus,proto3" json:"hyperchain_node_ous,omitempty"`
	// contains filtered or unexported fields
}

type HyperchainNodeOUs struct {

	// If true then an msp identity that does not contain any of the specified OU will be considered invalid.
	Enable bool `protobuf:"varint,1,opt,name=enable,proto3" json:"enable,omitempty"`
	// OU Identifier of the clients
	ClientOuIdentifier *HyperchainOUIdentifier `protobuf:"bytes,2,opt,name=client_ou_identifier,json=clientOuIdentifier,proto3" json:"client_ou_identifier,omitempty"`
	// OU Identifier of the peers
	PeerOuIdentifier *HyperchainOUIdentifier `protobuf:"bytes,3,opt,name=peer_ou_identifier,json=peerOuIdentifier,proto3" json:"peer_ou_identifier,omitempty"`
	// OU Identifier of the admins
	AdminOuIdentifier *HyperchainOUIdentifier `protobuf:"bytes,4,opt,name=admin_ou_identifier,json=adminOuIdentifier,proto3" json:"admin_ou_identifier,omitempty"`
	// OU Identifier of the orderers
	OrdererOuIdentifier *HyperchainOUIdentifier `protobuf:"bytes,5,opt,name=orderer_ou_identifier,json=ordererOuIdentifier,proto3" json:"orderer_ou_identifier,omitempty"`
	// contains filtered or unexported fields
}

type HyperchainOUIdentifier struct {

	// Certificate represents the second certificate in a certification chain.
	// (Notice that the first certificate in a certification chain is supposed
	// to be the certificate of an identity).
	// It must correspond to the certificate of root or intermediate CA
	// recognized by the MSP this message belongs to.
	// Starting from this certificate, a certification chain is computed
	// and bound to the OrganizationUnitIdentifier specified
	Certificate []byte `protobuf:"bytes,1,opt,name=certificate,proto3" json:"certificate,omitempty"`
	// OrganizationUnitIdentifier defines the organizational unit under the
	// MSP identified with MSPIdentifier
	OrganizationalUnitIdentifier string `` /* 147-byte string literal not displayed */
	// contains filtered or unexported fields
}

type IdemixMSPConfig struct {

	// Name holds the identifier of the MSP
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// ipk represents the (serialized) issuer public key
	Ipk []byte `protobuf:"bytes,2,opt,name=ipk,proto3" json:"ipk,omitempty"`
	// signer may contain crypto material to configure a default signer
	Signer *IdemixMSPSignerConfig `protobuf:"bytes,3,opt,name=signer,proto3" json:"signer,omitempty"`
	// revocation_pk is the public key used for revocation of credentials
	RevocationPk []byte `protobuf:"bytes,4,opt,name=revocation_pk,json=revocationPk,proto3" json:"revocation_pk,omitempty"`
	// epoch represents the current epoch (time interval) used for revocation
	Epoch int64 `protobuf:"varint,5,opt,name=epoch,proto3" json:"epoch,omitempty"`
	// contains filtered or unexported fields
}

type IdemixMSPSignerConfig struct {

	// cred represents the serialized idemix credential of the default signer
	Cred []byte `protobuf:"bytes,1,opt,name=cred,proto3" json:"cred,omitempty"`
	// sk is the secret key of the default signer, corresponding to credential Cred
	Sk []byte `protobuf:"bytes,2,opt,name=sk,proto3" json:"sk,omitempty"`
	// organizational_unit_identifier defines the organizational unit the default signer is in
	OrganizationalUnitIdentifier string `` /* 147-byte string literal not displayed */
	// role defines whether the default signer is admin, peer, member or client
	Role int32 `protobuf:"varint,4,opt,name=role,proto3" json:"role,omitempty"`
	// enrollment_id contains the enrollment id of this signer
	EnrollmentId string `protobuf:"bytes,5,opt,name=enrollment_id,json=enrollmentId,proto3" json:"enrollment_id,omitempty"`
	// credential_revocation_information contains a serialized CredentialRevocationInformation
	CredentialRevocationInformation []byte `` /* 156-byte string literal not displayed */
	// contains filtered or unexported fields
}

type KeyInfo struct {

	// Identifier of the key inside the default keystore; this for
	// the case of Software BCCSP as well as the HSM BCCSP would be
	// the SKI of the key
	KeyIdentifier string `protobuf:"bytes,1,opt,name=key_identifier,json=keyIdentifier,proto3" json:"key_identifier,omitempty"`
	// KeyMaterial 密钥的 ASN.1 DER PEM 格式数据。
	KeyMaterial []byte `protobuf:"bytes,2,opt,name=key_material,json=keyMaterial,proto3" json:"key_material,omitempty"`
	// contains filtered or unexported fields
}

type MSPConfig struct {

	// Config HyperchainMSPConfig 结构体的 protobuf 编码的字节。
	Config []byte `protobuf:"bytes,1,opt,name=config,proto3" json:"config,omitempty"`
	// contains filtered or unexported fields
}

type MSPIdentityAnonymity struct {
	AnonymityType MSPIdentityAnonymity_MSPIdentityAnonymityType `` /* 158-byte string literal not displayed */
	// contains filtered or unexported fields
}

type MSPIdentityAnonymity_MSPIdentityAnonymityType int32

type MSPPrincipal struct {

	// Classification describes the way that one should process
	// Principal. An Classification value of "ByOrganizationUnit" reflects
	// that "Principal" contains the name of an organization this MSP
	// handles. A Classification value "ByIdentity" means that
	// "Principal" contains a specific identity. Default value
	// denotes that Principal contains one of the groups by
	// default supported by all MSPs ("admin" or "member").
	PrincipalClassification MSPPrincipal_Classification `` /* 170-byte string literal not displayed */
	// Principal 可能是以下几种数据经过 proto.Marshal() 方法序列化后得到的字节切片：
	//  1. &MSPRole{}
	//  2. &SerializedIdentity{}
	//  3. &OrganizationUnit{}
	//  4. &MSPIdentityAnonymity{}
	Principal []byte `protobuf:"bytes,2,opt,name=principal,proto3" json:"principal,omitempty"`
	// contains filtered or unexported fields
}

type MSPPrincipal_Classification int32

type MSPRole struct {

	// MSPIdentifier represents the identifier of the MSP this principal
	// refers to
	MspIdentifier string `protobuf:"bytes,1,opt,name=msp_identifier,json=mspIdentifier,proto3" json:"msp_identifier,omitempty"`
	// MSPRoleType defines which of the available, pre-defined MSP-roles
	// an identiy should posess inside the MSP with identifier MSPidentifier
	Role MSPRole_MSPRoleType `protobuf:"varint,2,opt,name=role,proto3,enum=pbmsp.MSPRole_MSPRoleType" json:"role,omitempty"`
	// contains filtered or unexported fields
}

type MSPRole_MSPRoleType int32

type OrganizationUnit struct {

	// MSPIdentifier represents the identifier of the MSP this organization unit
	// refers to
	MspIdentifier string `protobuf:"bytes,1,opt,name=msp_identifier,json=mspIdentifier,proto3" json:"msp_identifier,omitempty"`
	// OrganizationUnitIdentifier defines the organizational unit under the
	// MSP identified with MSPIdentifier
	OrganizationalUnitIdentifier string `` /* 147-byte string literal not displayed */
	// CertifiersIdentifier is the hash of certificates chain of trust
	// related to this organizational unit
	CertifiersIdentifier []byte `protobuf:"bytes,3,opt,name=certifiers_identifier,json=certifiersIdentifier,proto3" json:"certifiers_identifier,omitempty"`
	// contains filtered or unexported fields
}

type SerializedIdentity struct {

	// Mspid MSP 的名字（标识符）。
	Mspid string `protobuf:"bytes,1,opt,name=mspid,proto3" json:"mspid,omitempty"`
	// IdBytes x509 证书的 ASN.1 DER PEM 格式的数据。
	IdBytes []byte `protobuf:"bytes,2,opt,name=id_bytes,json=idBytes,proto3" json:"id_bytes,omitempty"`
	// contains filtered or unexported fields
}

type SigningIdentityInfo struct {

	// PublicSigner x509 证书的 ASN.1 DER PEM 格式编码的数据。
	PublicSigner []byte `protobuf:"bytes,1,opt,name=public_signer,json=publicSigner,proto3" json:"public_signer,omitempty"`
	// PrivateSigner 与 PublicSigner 相对应的私钥信息，当根据 PublicSigner 的公钥的 SKI 在 keystore
	// 中找不到私钥时，就可以利用 PrivateSigner 携带的私钥信息导入私钥到 keystore 中。
	PrivateSigner *KeyInfo `protobuf:"bytes,2,opt,name=private_signer,json=privateSigner,proto3" json:"private_signer,omitempty"`
	// contains filtered or unexported fields
}