A method for establishing communication between blockchain nodes of a blockchain joining in blockchain communication, wherein each blockchain node in the blockchain is issued, for communicating with other blockchain nodes in the blockchain, a respective digital certificate by a certificate authority, CA, center maintained by the blockchain, wherein, when the CA center issues the respective digital certificate, the issued digital certificate is written into the blockchain to store the issued digital certificate into all blockchain nodes in the blockchain, wherein the method comprises: receiving, by a second node in the blockchain, a first request for establishing a communication connection between a first node in the blockchain and the second node, the first request sent by the first node and comprising a digital certificate of the first node, the digital certificate of the first node stored in the first node and in the second node; locally invoking, by the second node, certificate validity information locally stored in the second node by directly reading the certificate validity information locally stored in the second node, wherein the digital certificate of the first node and validity status information of the digital certificate are collated in advance to form the certificate validity information, the certificate validity information being assembled based on a valid certificate list for valid digital certificates and a revoked certificate list for invalid digital certificates; verifying, by the second node based on the digital certificate received with the first request and based on the certificate validity information, whether the digital certificate of the first node is valid; in response to verifying that the digital certificate of the first node is valid, determining, by the second node, to establish the communication connection between the first node and the second node, and sending, by the second node, a second communication request to the first node, wherein the second communication request comprises a digital certificate of the second node, wherein the first node verifies, based on the second communication request and the certificate validity information locally stored in the first node, whether the digital certificate of the second node is valid; and when the first node verifies that the digital certificate of the second node is valid, establishing, by the second node, the communication connection between the second node and the first node. receiving, by a second node in the blockchain, a first request for establishing a communication connection between a first node in the blockchain and the second node, the first request sent by the first node and comprising a digital certificate of the first node, the digital certificate of the first node stored in the first node and in the second node; locally invoking, by the second node, certificate validity information locally stored in the second node by directly reading the certificate validity information locally stored in the second node, wherein the digital certificate of the first node and validity status information of the digital certificate are collated in advance to form the certificate validity information, the certificate validity information being assembled based on a valid certificate list for valid digital certificates and a revoked certificate list for invalid digital certificates; verifying, by the second node based on the digital certificate received with the first request and based on the certificate validity information, whether the digital certificate of the first node is valid; in response to verifying that the digital certificate of the first node is valid, determining, by the second node, to establish the communication connection between the first node and the second node, and sending, by the second node, a second communication request to the first node, wherein the second communication request comprises a digital certificate of the second node, determining, by the second node, to establish the communication connection between the first node and the second node, and sending, by the second node, a second communication request to the first node, wherein the second communication request comprises a digital certificate of the second node, wherein the first node verifies, based on the second communication request and the certificate validity information locally stored in the first node, whether the digital certificate of the second node is valid; and when the first node verifies that the digital certificate of the second node is valid, establishing, by the second node, the communication connection between the second node and the first node.