Skip to content

Deploying Contour 9.0

You can request the Contour installation package via the Contour Support Portal.

Deployment Diagram

Overview of the deployment and components as shown in the diagram below.

  1. Application Components - which can run on same server or 2 different servers
    • Contour Web App: a Spring Boot application
    • Corda + Contour CorDapp
  2. Databases - 2 databases which can be on same server
    • Database for Contour Web App
    • Database for Corda and Contour CorDapp

Deployment Diagram

Step 1. Prepare

1.1 Pre-requisites

  1. Provision one (1) or two (2) servers (e.g. VMs). Recommended spec:

    • OS: Ubuntu 14/16 or RHEL 7
    • CPU: 2 (v)Core or more
    • RAM: 8G RAM or more
    • Disk: 50G or more
    • Java 8 JDK. Install the Java 8 JDK. Corda requires at least version 8u171, but do not currently support Java 9 or higher for this version of Corda. Verify java version with command: java -version. Corda has been tested against the following Java builds:

  2. Provision two (2) Databases, create DB account with READ/WRITE access. Database types supported:

    • PostgreSQL 10 or above; or
    • SQL Server 2017 or above

  3. Provision one (1) SMTP account for email notification

  4. Make sure firewall rules have been configured to allowed the required network connections as detailed in Network Connections / Firewall Rules

1.2 Download & Prepare Package

  1. Pull Contour installation v9.0 package (e.g. contour-9.0.zip) onto the destination server
  2. Upzip the package (e.g. to directory ~/contour-9.0/), which contains:
~/contour-9.0
|-- api-service/    # installation files for Contour Web App
|-- corda/          # installation files for Corda and Contour CorDapps
|-- Corda Enterprise 4.10.2   # Corda Enterprise packages, incl. Corda Firewall

1.3 Get node X500 ready

Raise support ticket with below information for your node X500 pre approval

  1. X500 name in plain text format. Please refer to allowable identity name.
  2. Node company registered address

Contour support will raise the request to Corda Network Foundation (CNF) for X500 pre approval and inform you once approved.

1.4 Sanity check on infra layer

Prior to starting the Corda Node setup, it's recommended to check all the connectivity described in Network Connections / Firewall Rules.

  1. Contour network / BNO
  2. Notary
  3. Corda Network Map
  4. Corda Network Doorman
  5. Certificate Revocation List(crl) Endpoint

Step 2. Install Corda & CordApp

2.1 Install Corda 4.10.2

You can skip this step if running Contour CorDapp on an existing Corda Node.

  1. Copy & paste the entire v9.0 package corda/ directory to the desired installation path, e.g. /opt/corda. => Copy & paste entiry directory from ~/contour-9.0/corda to /opt/corda;
  2. Change working directory to the Corda installation directory, e.g. cd /opt/corda;
  3. Update the Corda node configurations, with reference to Corda Node Config;
  4. Change working directory to the certificates sub-directory, e.g. cd /opt/corda/certificates;
    • there are two (2) trust root files from the Certificate Authority (CA, a.k.a Doorman) in different Corda Network
    • cn-prod-truststore.jks for Corda Network Prod
    • cn-preprod-truststore.jks for Corda Network Pre-prod
  5. Change working directory back to Corda installation directory, e.g. cd /opt/corda/. Raise Certificate Signing Request (CSR) by doing init registration and specify the right trust root to the Corda Network the node is joining. E.g.
    • Command to join Corda Network Prod: java -jar corda-4.10.2.jar initial-registration --network-root-truststore certificates/cn-prod-truststore.jks --network-root-truststore-password trustpass
    • Command to join Corda Network Pre-prod: java -jar corda-4.10.2.jar initial-registration --network-root-truststore certificates/cn-preprod-truststore.jks --network-root-truststore-password trustpass
  6. Raise a ticket to Contour Support to request CSR approval from Corda Network Foundation (CNF), by specifying the request ID. E.g. 9309e1ef-038f-444b-9df3-b6e8b7726c11 in this example.
Running Corda Init Registration Flow..
Getting Request ID..
Getting Request ID..
Getting Request ID..
Getting Request ID..
Getting Request ID..
Init Registration Request sent, ID: 9309e1ef-038f-444b-9df3-b6e8b7726c11
Please contact CA to approve your request,
The Init-Registration proccess(pid:) is running in background, please run this script again

The Corda node will keep pulling the CSR approval from Doorman. Upon approval, the Corda node will terminate automatically.

2.2 Install Contour v9.0 CorDapps

  1. Copy & paste the entire v9.0 package /corda/cordapps/ directory to your existing corda/ installation directory, e.g. from ~/contour-9.0/corda/cordapps to /opt/corda/cordapps
  2. Change working directory to the Corda installation directory, e.g. cd /opt/corda/cordapps
  3. Update the Contour CorDapp configurations under the cordapps/cofig directory, e.g. /opt/corda/cordapps/contour-cordapp-9.0.0.conf, with reference to Contour CorDapp Config
  4. Change working directory back to Corda installation directory, e.g. cd /opt/corda/;
  5. Start the Corda node, e.g. command java -jar corda-4.10.2.jar --base-directory /opt/corda --config-file /opt/corda/node.conf

2.3 Check Network Connection to Contour BNO

This step is to test the network connection from your Corda node to Contour Business Network Operator (BNO), before the next step.

This requires using the Corda Node Shell, to manually trigger a Ping flow that Contour have introduced with the contour-business-tools-9.0.0.jar.

  1. Connecting to the Corda Shell using the command ssh -p [sshd portNumber] [rpc username]@[host, e.g. localhost]
    • e.g. ssh -p 2222 cordau@localhost
  2. Key in rpc userpassword as specified in the node.conf
  3. Run the command flow list, which lists out all the Corda flows available in the cordapps
  4. Run the command flow start network.contour.app.flow.SinglePingFlow$Initiator target: "<Contour BNO x500Name>", e.g.
    • For Contour Prod: flow start network.contour.app.flow.SinglePingFlow$Initiator target: "OU=Trade Finance, O=Global Trade Network, L=Singapore, C=SG"
    • For Contour Staging: flow start network.contour.app.flow.SinglePingFlow$Initiator target: "OU=Contour BNO, O=Contour Pte. Ltd., L=Singapore, C=SG"
  5. If the network connections have configured properly, the Ping flow will comeplete successfully with example output as below. 
Mon Dec 14 03:34:07 UTC 2020>>> flow start network.contour.app.flow.SinglePingFlow$Initiator target: "OU=Contour BNO, O=Contour Pte. Ltd., L=Singapore, C=SG"

 ✓ Starting
 ✓ Start the ping.
 ✓ Receive the ping.
▶︎ Done
Flow completed with result: OU=Contour BNO, O=Contour Pte. Ltd., L=Singapore, C=SG.name has received ping at 2020-12-14T03:36:10.853Z
ping target OU=Contour BNO, O=Contour Pte. Ltd., L=Singapore, C=SG time elapsed = 97 ms

Step 3. Install Contour Web App

Please proceed to install Contour Web App, after the Corda node and Contour CorDapps ready as desribed in Step 2.

  1. Copy & paste the entire v9.0 package api-service/ directory to the desired installation path, e.g. /opt/api-service. => Copy & paste entiry directory from ~/contour-9.0/api-service to /opt/api-service;
  2. Change working directory to the WebApp installation directory, e.g. cd /opt/api-service;
  3. Update the Contour Web App configurations, e.g. /opt/api-service/application.properties, with reference to Contour Web App Config;
  4. Update the bootstrap file, /opt/api-service/bootstrap.json, with reference to Contour Bootstrap Web App
  5. Start the Contour Web App, e.g. command java -jar contour-service-9.0.1.jar

Now, the Contour Web Application should be up and running.

  • the nodeadmin users specified in the bootstrap.json should receive their account activation email

Note When setup HTTPS for the web, it's recommended to use reverse proxy like NGINX to serve the frontend static page, but not the springboot (Contour service).

Step 4. Request new identity

You can request to create identity under the node via the Contour Support Portal with below infomation.

  1. The node name or node X500 name under which the new identiy will be created
  2. Identity name
  3. Company legal name
  4. Identity registered address
  5. Location / City and Country
  6. Technical contact email (optional)
  7. SWIFT/BIC code or LEI code (optional)

Contour support team will inform you once the new identity is ready to use.

Step 5. Get the Node and Identity ready

Follow the Quick Start Guide to ready the node for transaction.