hyperledger/fabric · error

invalid configuration block, missing %s configuration group

Error message

invalid configuration block, missing %s configuration group

What it means

After confirming the group map exists, extractChannelConfig requires the top-level Application group because both ValidateCapabilities and ExtractMSPIDsForApplicationOrgs operate on application-organization config. This formatted error reports which named group key is missing from ChannelGroup.Groups. ApplicationGroupKey is 'Application'.

Source

Thrown at common/channelconfig/util.go:301

	if err != nil {
		return nil, errors.WithMessage(err, "malformed configuration envelope")
	}

	if configEnv.Config == nil {
		return nil, errors.New("no config found in envelope")
	}

	if configEnv.Config.ChannelGroup == nil {
		return nil, errors.New("no channel configuration found in the config block")
	}

	if configEnv.Config.ChannelGroup.Groups == nil {
		return nil, errors.New("no channel configuration groups are available")
	}

	_, exists := configEnv.Config.ChannelGroup.Groups[ApplicationGroupKey]
	if !exists {
		return nil, errors.Errorf("invalid configuration block, missing %s configuration group", ApplicationGroupKey)
	}

	cc, err := NewChannelConfig(configEnv.Config.ChannelGroup, bccsp)
	if err != nil {
		return nil, errors.WithMessage(err, "no valid channel configuration found")
	}
	return cc, nil
}

// MarshalEtcdRaftMetadata serializes etcd RAFT metadata.
func MarshalEtcdRaftMetadata(md *etcdraft.ConfigMetadata) ([]byte, error) {
	copyMd := proto.Clone(md).(*etcdraft.ConfigMetadata)
	for _, c := range copyMd.Consenters {
		// Expect the user to set the config value for client/server certs to the
		// path where they are persisted locally, then load these files to memory.
		clientCert, err := os.ReadFile(string(c.GetClientTlsCert()))
		if err != nil {
			return nil, fmt.Errorf("cannot load client cert for consenter %s:%d: %s", c.GetHost(), c.GetPort(), err)

View on GitHub (pinned to 2736b63f8f)

Solutions

1. Use the config block of an application channel (e.g. peer channel fetch config on the right channel), not the system channel or orderer genesis block.
2. Add/populate ChannelGroup.Groups["Application"] when constructing the config programmatically.
3. Confirm you are not passing a config extracted from a Consortiums or Orderer subtree as a full channel config.
4. Pre-check the groups map for channelconfig.ApplicationGroupKey before invoking and produce a targeted error.

Example fix

// before
block := fetchBlock("system") // system channel config
err := ExtractMSPIDsForApplicationOrgs(env)
// after
block := fetchBlock("mychannel") // application channel config
err := ExtractMSPIDsForApplicationOrgs(env)

import "github.com/hyperledger/fabric/common/channelconfig"

func hasApplicationGroup(c *cb.Config) bool {
	_, ok := c.ChannelGroup.Groups[channelconfig.ApplicationGroupKey]
	return ok
}
if !hasApplicationGroup(configEnv.Config) {
	return errors.New("config is not an application channel config")
}

func isAppChannelConfig(c *cb.Config) bool {
	return c != nil && c.ChannelGroup != nil && c.ChannelGroup.Groups != nil && c.ChannelGroup.Groups["Application"] != nil
}

When it happens

Trigger: Calling ValidateCapabilities or ExtractMSPIDsForApplicationOrgs on a config envelope whose ChannelGroup.Groups lacks the 'Application' key — e.g. an Orderer-only (system channel) config, or a config for a consortium channel fetched via the wrong path.

Common situations: Pointing tooling at the system channel / orderer config block instead of an application channel's config block; stripping the Application group when building configs programmatically; using a consortium-level config where only Orderer and Consortiums groups exist.

Related errors

• some orderer organizations endpoints are empty: %s
• organizations do not support sub-groups
• failed to deserialize values
• MSP for org %s has empty MSP ID
• Unexpected key %s

AI-assisted analysis of hyperledger/fabric@2736b63f8f (2026-09-04). Data as JSON: /api/errors/0f0f9509987e87b1. Report an issue: GitHub.