Martin Regen
37c623ef23
fix localisation issue in authority key parser
2017-09-21 11:08:07 +02:00
Martin Regen
3770bc5344
improve comment
2017-07-11 10:36:13 +02:00
Martin Regen
851fcd5fe0
Only test if cert is not issuer
2017-07-10 16:14:42 +02:00
Martin Regen
e99745aa41
fix Security Certificyte Validation / test 010
...
NotSignatureValid is only returned on Windows, add the additional verification to be sure on all platforms.
2017-07-10 15:16:56 +02:00
Martin Regen
3f21d1a0ab
merge 2017 changes
2017-06-26 17:22:26 +02:00
Erich Barnstedt
deb3f120ca
Small cleanup of cert factory I/F, removing implicit default parameters.
2017-06-23 15:52:41 +02:00
Martin Regen
eace0012da
fix 'cert signed with wrog key' / sec / cert valid / 010
2017-06-20 16:11:20 +02:00
Erich Barnstedt
1f99f4cdeb
Added support for passing public key to CreateCert.
2017-05-19 17:05:51 +02:00
Erich Barnstedt
b167c2a0e6
Bug fixing.
2017-05-19 09:51:25 +02:00
Erich Barnstedt
298fcb1ff0
More PR feedback.
2017-05-17 09:11:35 +02:00
Erich Barnstedt
ff75521be5
PR feedback.
2017-05-17 08:39:26 +02:00
Erich Barnstedt
1365b58a9c
Merge branch 'prototyping'
2017-05-16 09:46:15 +02:00
Erich Barnstedt
928c2a1083
Implemented signing a cert with the private key of the CA's root.
2017-05-11 23:01:08 +02:00
Erich Barnstedt
ef8fe340b6
1. Removed SecurityLevel from server config, it is now automatically calculated for each endpoint description.
...
2. Fixed spelling/grammar in a few places.
2017-05-08 12:29:57 +02:00
Erich Barnstedt
45afb7e9ec
Merge branch 'master'
2017-05-07 20:10:58 +02:00
Erich Barnstedt
6be44c7aec
Got GDS compiling and running again.
2017-05-07 00:17:59 +02:00
Martin Regen
732e7c7a42
issues found in testing
2017-05-02 13:32:41 +02:00
Martin Regen
232f554636
- regressions found during UACTT pass.
...
- add secure RNG for BC create cert function
2017-05-01 20:20:32 +02:00
Martin Regen
e391c6b14b
remove default values, caused an exception...
2017-04-28 14:48:26 +02:00
Martin Regen
1ae6d63461
check for SHA1 and key length
2017-04-27 17:28:54 +02:00
Martin Regen
3c52cf7761
- allow subjectnames with CN=xxx, O= etc.
...
- misc. bugfixes
- pen: set default security to highest
- pen: cert default lifetime 12 month
2017-04-27 14:21:47 +02:00
Erich Barnstedt
d3266d5cd8
Swap cert creation flags order to work around an Azure issue.
2017-03-09 10:49:04 +01:00
Erich Barnstedt
9fb49f7730
Remove persist keyset flag from directory cert store as it doesn't make sense (we always store .pfx files) and rev nuget package numbers.
2017-03-09 00:01:27 +01:00
Erich Barnstedt
aa1e32407e
Added the password in the wrong place!
...
Also removed two unused classes.
2017-03-01 08:15:38 +01:00
Erich Barnstedt
e9ae8d9c72
Allow passing in a password for generating PFX file.
2017-02-28 23:59:55 +01:00
Erich Barnstedt
acb026fda9
Fix X509KeyStorageFlags.
2017-02-25 15:48:12 +01:00
Erich Barnstedt
1ca33b7239
Made access to X509Store more granular such that we can open the store read-only for platforms where writing directly to ther store is not supported, like ASP.Net.
2017-02-22 09:58:35 +01:00
Erich Barnstedt
f2cb5e50c0
Addressed more review feedback...
2017-02-16 16:06:08 +01:00
Erich Barnstedt
a332f659e5
Adressed code review feedback.
2017-02-16 15:41:26 +01:00
Erich Barnstedt
5b3484e57c
Added support for crl (in crl directory).
2017-02-15 10:05:59 +01:00
Erich Barnstedt
e4a3933a01
Fruther remove unused methods in cert stores.
2017-02-15 10:00:24 +01:00
Erich Barnstedt
4fe63122b0
Removed unused methods.
2017-02-15 09:50:06 +01:00
Erich Barnstedt
2609e58615
Remove setting/getting Access Rules for files and HTTP since this is not implemented anyway.
2017-02-15 09:36:03 +01:00
Erich Barnstedt
fc6e96b496
Added trace to see when certs are added.
2017-02-14 18:45:28 +01:00
Erich Barnstedt
8b16699e7e
Added X509 cert store (as a replacement for the platform-specific Windows cert store) and modified UA Client app to make use of it.
2017-02-13 19:14:59 +01:00
Martin Regen
5f5b809c64
use SubjectName to create cert, not ApplicationName
...
otherwise new certs are created on every start if the SubjectName is not equal to the Application name
2017-01-21 18:45:33 +01:00
Martin Regen
f8876e2f35
reduce usage of Task.Run
...
build debugType portable
2017-01-12 11:24:16 +01:00
Martin Regen
a9958bb683
fix an exception on Linux when the /private cert folder doesn't exist
2017-01-12 09:52:15 +01:00
Martin Regen
5c370bd742
cert creation fixes
...
- certs were not created on Linux w. Openssl if a passcode was missing from the pkcs12 store
- stabilize the creation on windows where UWP is picky about the storage keys to use
- CR feedback
2016-12-08 18:35:31 +01:00
Martin Regen
2148d65084
improve cert handling of sample apps
...
- create self signed cert on first start (kudos to bouncy castle)
- fix path handling in many areas,
- ./ or ../ is treated as rooted dir
- special %LocalFolder% for UWP apps to allow to write certs in app temp storage
- all batch helpers to create certs removed
2016-12-07 18:29:24 +01:00
Martin Regen
a62d11c3fb
Basic256Sha256 support
2016-12-02 22:35:00 +01:00
Martin Regen
da6b068f9b
- CTT testing, improve various test cases, mostly disagnostic related.
2016-12-01 17:14:35 +01:00
Martin Regen
468b4449d8
fix cert and uri handling
...
- linux: x509 parsing fixed
- cert app uri should be used if cert is available
- endpoints and uri should contain the hostname not localhost
2016-11-11 10:08:02 +01:00
Martin Regen
057912c825
- Fixes found during a CTT test pass. Many fixes also due to sync with .Net codebase.
...
- Sync codebase of Opc.Ua libraries to UA.Net 1.03.340 source on github.
-CTT stress failures and exceptions all fixed.
-Roughly 2 dozen CTT tests are still with red bubbles. Mainly very special cases.
2016-10-07 16:20:25 +02:00
Erich Barnstedt
443c918d67
Merge pull request #60 from mregen/crl
...
Implement CRL support with Bouncy Castle. Tested with issuer certs fr…
2016-09-14 14:05:36 +02:00
Martin Regen
68ed5c07d5
cr feedback. keep set methods, but private. catch the bc exception and respect the throwOnError parameter.
2016-09-14 12:55:41 +02:00
Martin Regen
509d48d2c8
Implement CRL support with Bouncy Castle. Tested with issuer certs from OPC.Ua.CertificateGenerator. Also port latest security updates from UA.Net project.
2016-09-13 17:29:16 +02:00
Erich Barnstedt
5d565637dd
Changes required for running UA applications on ASP.Net in the cloud.
2016-09-13 10:08:31 +02:00
Erich Barnstedt
bfecd8bc8b
1. Removed "TestPackage" from NuGet configuration.
...
2. Added generate cert script to project files.
3. Made "\\" platform independent, even for .Net4 samples (apart from GDS samples).
4. Fixed cert validation popups (yes/no was reversed!).
5. Got GDS server and client samples running (no connection yet).
6. Fixed configuration and popups in GDS client.
2016-08-05 10:58:51 +02:00
Erich Barnstedt
4a0bc1429c
Merge pull request #43 from mregen/standard
...
Got GDS compiling.
2016-08-04 06:18:36 -07:00