hyperledger/fabric · error

Missing Header

Error message

Missing Header

What it means

EnvelopeAsSignedData requires the envelope's Payload to carry a Header, because the creator identity needed for SignedData lives in Payload.Header.SignatureHeader. If payload.Header is nil, there is no way to attribute the signature to an identity, so this error is returned.

Source

Thrown at protoutil/signeddata.go:73

	return result, nil
}

// EnvelopeAsSignedData returns the signatures for the Envelope as SignedData
// slice of length 1 or an error indicating why this was not possible.
func EnvelopeAsSignedData(env *common.Envelope) ([]*SignedData, error) {
	if env == nil {
		return nil, errors.New("No signatures for nil Envelope")
	}

	payload := &common.Payload{}
	err := proto.Unmarshal(env.Payload, payload)
	if err != nil {
		return nil, err
	}

	if payload.Header == nil /* || payload.Header.SignatureHeader == nil */ {
		return nil, errors.New("Missing Header")
	}

	shdr := &common.SignatureHeader{}
	err = proto.Unmarshal(payload.Header.SignatureHeader, shdr)
	if err != nil {
		return nil, fmt.Errorf("GetSignatureHeaderFromBytes failed, err %s", err)
	}

	return []*SignedData{{
		Data:      env.Payload,
		Identity:  shdr.Creator,
		Signature: env.Signature,
	}}, nil
}

// LogMessageForSerializedIdentity returns a string with serialized identity information,
// or a string indicating why the serialized identity information cannot be returned.
// Any errors are intentionally returned in the return strings so that the function can be used in single-line log messages with minimal clutter.

View on GitHub (pinned to 2736b63f8f)

Solutions

1. Build envelopes via protoutil.CreateSignedEnvelope (or the SDK's transaction builder) so Payload.Header with ChannelHeader and SignatureHeader is always set.
2. Validate payload.Header != nil on the client side before signing and submitting.
3. If the envelope came from a block, treat it as malformed: the transaction will be filtered/rejected by validation anyway.
4. Ensure the SDK populates SignatureHeader (nonce + creator) — a missing creator means the signature cannot be verified.

Example fix

// before
payload := &common.Payload{Data: data}
env := &common.Envelope{Payload: protoutil.MarshalOrPanic(payload)}

// after
chdr := protoutil.MakeChannelHeader(common.HeaderType_MESSAGE, msgVersion, chID, epoch)
shdr := protoutil.MakeSignatureHeader(serializedCreator, nonce)
payload := &common.Payload{Header: protoutil.MakePayloadHeader(chdr, shdr), Data: data}
env, err := protoutil.CreateSignedEnvelope(...)

payload := &common.Payload{}
if err := proto.Unmarshal(env.Payload, payload); err != nil {
    return err
}
if payload.Header == nil || len(payload.Header.SignatureHeader) == 0 {
    return errors.New("envelope payload must include ChannelHeader and SignatureHeader")
}

func hasPayloadHeader(env *common.Envelope) bool {
    var p common.Payload
    if proto.Unmarshal(env.GetPayload(), &p) != nil {
        return false
    }
    return p.Header != nil && len(p.Header.SignatureHeader) > 0 && len(p.Header.ChannelHeader) > 0
}

sd, err := protoutil.EnvelopeAsSignedData(env)
if err != nil {
    if strings.Contains(err.Error(), "Missing Header") {
        return status.Error(codes.InvalidArgument, "envelope lacks payload header; rebuild with CreateSignedEnvelope")
    }
    return err
}

When it happens

Trigger: An Envelope whose marshaled Payload has no Header — envelopes built by setting only Payload.Data and Signature, payloads that never went through a proposal/transaction constructor, or wire-corrupted payloads that unmarshal without a header.

Common situations: Clients submitting raw envelopes without channel/signature headers; tests crafting envelopes by hand; envelopes crossing fabric versions where header fields were dropped; block data hand-modified for tooling.

Related errors

• invalid type of envelope for chaincode package
• could not convert message to signedData: %s
• header not set
• chaincode spec is nil
• chaincode id is nil

AI-assisted analysis of hyperledger/fabric@2736b63f8f (2026-09-04). Data as JSON: /api/errors/29555c9d3da05555. Report an issue: GitHub.