hyperledger/fabric · error

could not create channel %s sub-group config

Error message

could not create channel %s sub-group config

What it means

This is a wrapping error from NewChannelConfig: whichever sub-config constructor (NewApplicationConfig, NewOrdererConfig, or NewConsortiumsConfig) returned a failure is wrapped as "could not create channel %s sub-group config". The inner error carries the real cause (e.g. missing policies, bad MSP config, invalid orderer addresses), and %s names the failing group.

Source

Thrown at common/channelconfig/channel.go:114

		return nil, err
	}

	mspConfigHandler := NewMSPConfigHandler(channelCapabilities.MSPVersion(), bccsp)

	var err error
	for groupName, group := range channelGroup.Groups {
		switch groupName {
		case ApplicationGroupKey:
			cc.appConfig, err = NewApplicationConfig(group, mspConfigHandler)
		case OrdererGroupKey:
			cc.ordererConfig, err = NewOrdererConfig(group, mspConfigHandler, channelCapabilities)
		case ConsortiumsGroupKey:
			cc.consortiumsConfig, err = NewConsortiumsConfig(group, mspConfigHandler)
		default:
			return nil, fmt.Errorf("Disallowed channel group: %s", group)
		}
		if err != nil {
			return nil, errors.Wrapf(err, "could not create channel %s sub-group config", groupName)
		}
	}

	if cc.mspManager, err = mspConfigHandler.CreateMSPManager(); err != nil {
		return nil, err
	}

	return cc, nil
}

// MSPManager returns the MSP manager for this config
func (cc *ChannelConfig) MSPManager() msp.MSPManager {
	return cc.mspManager
}

// OrdererConfig returns the orderer config associated with this channel
func (cc *ChannelConfig) OrdererConfig() *OrdererConfig {
	return cc.ordererConfig

View on GitHub (pinned to 2736b63f8f)

Solutions

1. Read the wrapped inner error to find the real failure, then fix that sub-config (application/orderer/consortiums)
2. Validate configtx.yaml with `configtxgen -printOrg` / config generation and fix the named section
3. Decode the failing config with configtxlator and inspect the named group's values and policies
4. Ensure all referenced organizations and policies exist and are well-formed in the group

// pre-validate referenced orgs/policies exist before constructing
for gname, group := range channelGroup.Groups {
    if group.Policies == nil || len(group.Policies) == 0 {
        return fmt.Errorf("group %s has no policies", gname)
    }
}

cc, err := channelconfig.NewChannelConfig(channelGroup, bccsp)
if err != nil {
    if strings.Contains(err.Error(), "sub-group config") {
        // surface the wrapped inner error for the real fix
        return fmt.Errorf("sub-group construction failed: %w", errors.Unwrap(err))
    }
    return err
}

When it happens

Trigger: NewChannelConfig iterating Groups where a case calls one of the sub-config constructors and it returns err != nil — e.g. invalid Consortiums definition, bad orderer configuration (TLS/Kafka settings), or malformed MSP metadata in the application/orderer group.

Common situations: Malformed configtx.yaml sections (invalid Policies, wrong Organizations refs); orderer group referencing nonexistent consensus type settings; consortium definitions referencing organizations not defined in the channel; v1.4→v2.x config migrations with stale fields.

Related errors

• %s is mandatory and cannot be empty
• enrollment certificate isn't a valid PEM block
• failed to decode PEM block from %s
• config must contain a channel group
• cannot enable channel capabilities without orderer support f

AI-assisted analysis of hyperledger/fabric@2736b63f8f (2026-09-04). Data as JSON: /api/errors/8dfe570e9ccf90b5. Report an issue: GitHub.