Commit Graph
69 Commits
Author SHA1 Message Date
Martin Regen 37c623ef23 fix localisation issue in authority key parser 2017-09-21 11:08:07 +02:00
Martin Regen 3770bc5344 improve comment 2017-07-11 10:36:13 +02:00
Martin Regen 851fcd5fe0 Only test if cert is not issuer 2017-07-10 16:14:42 +02:00
Martin Regen e99745aa41 fix Security Certificyte Validation / test 010
NotSignatureValid is only returned on Windows, add the additional verification to be sure on all platforms.
2017-07-10 15:16:56 +02:00
Martin Regen 3f21d1a0ab merge 2017 changes 2017-06-26 17:22:26 +02:00
Erich Barnstedt deb3f120ca Small cleanup of cert factory I/F, removing implicit default parameters. 2017-06-23 15:52:41 +02:00
Martin Regen eace0012da fix 'cert signed with wrog key' / sec / cert valid / 010 2017-06-20 16:11:20 +02:00
Erich Barnstedt 1f99f4cdeb Added support for passing public key to CreateCert. 2017-05-19 17:05:51 +02:00
Erich Barnstedt b167c2a0e6 Bug fixing. 2017-05-19 09:51:25 +02:00
Erich Barnstedt 298fcb1ff0 More PR feedback. 2017-05-17 09:11:35 +02:00
Erich Barnstedt ff75521be5 PR feedback. 2017-05-17 08:39:26 +02:00
Erich Barnstedt 1365b58a9c Merge branch 'prototyping' 2017-05-16 09:46:15 +02:00
Erich Barnstedt 928c2a1083 Implemented signing a cert with the private key of the CA's root. 2017-05-11 23:01:08 +02:00
Erich Barnstedt ef8fe340b6 1. Removed SecurityLevel from server config, it is now automatically calculated for each endpoint description.
2. Fixed spelling/grammar in a few places.
2017-05-08 12:29:57 +02:00
Erich Barnstedt 45afb7e9ec Merge branch 'master' 2017-05-07 20:10:58 +02:00
Erich Barnstedt 6be44c7aec Got GDS compiling and running again. 2017-05-07 00:17:59 +02:00
Martin Regen 732e7c7a42 issues found in testing 2017-05-02 13:32:41 +02:00
Martin Regen 232f554636 - regressions found during UACTT pass.
- add secure RNG for BC create cert function
2017-05-01 20:20:32 +02:00
Martin Regen e391c6b14b remove default values, caused an exception... 2017-04-28 14:48:26 +02:00
Martin Regen 1ae6d63461 check for SHA1 and key length 2017-04-27 17:28:54 +02:00
Martin Regen 3c52cf7761 - allow subjectnames with CN=xxx, O= etc.
- misc. bugfixes
- pen: set default security to highest
- pen: cert default lifetime 12 month
2017-04-27 14:21:47 +02:00
Erich Barnstedt d3266d5cd8 Swap cert creation flags order to work around an Azure issue. 2017-03-09 10:49:04 +01:00
Erich Barnstedt 9fb49f7730 Remove persist keyset flag from directory cert store as it doesn't make sense (we always store .pfx files) and rev nuget package numbers. 2017-03-09 00:01:27 +01:00
Erich Barnstedt aa1e32407e Added the password in the wrong place!
Also removed two unused classes.
2017-03-01 08:15:38 +01:00
Erich Barnstedt e9ae8d9c72 Allow passing in a password for generating PFX file. 2017-02-28 23:59:55 +01:00
Erich Barnstedt acb026fda9 Fix X509KeyStorageFlags. 2017-02-25 15:48:12 +01:00
Erich Barnstedt 1ca33b7239 Made access to X509Store more granular such that we can open the store read-only for platforms where writing directly to ther store is not supported, like ASP.Net. 2017-02-22 09:58:35 +01:00
Erich Barnstedt f2cb5e50c0 Addressed more review feedback... 2017-02-16 16:06:08 +01:00
Erich Barnstedt a332f659e5 Adressed code review feedback. 2017-02-16 15:41:26 +01:00
Erich Barnstedt 5b3484e57c Added support for crl (in crl directory). 2017-02-15 10:05:59 +01:00
Erich Barnstedt e4a3933a01 Fruther remove unused methods in cert stores. 2017-02-15 10:00:24 +01:00
Erich Barnstedt 4fe63122b0 Removed unused methods. 2017-02-15 09:50:06 +01:00
Erich Barnstedt 2609e58615 Remove setting/getting Access Rules for files and HTTP since this is not implemented anyway. 2017-02-15 09:36:03 +01:00
Erich Barnstedt fc6e96b496 Added trace to see when certs are added. 2017-02-14 18:45:28 +01:00
Erich Barnstedt 8b16699e7e Added X509 cert store (as a replacement for the platform-specific Windows cert store) and modified UA Client app to make use of it. 2017-02-13 19:14:59 +01:00
Martin Regen 5f5b809c64 use SubjectName to create cert, not ApplicationName
otherwise new certs are created on every start if the SubjectName is not equal to the Application name
2017-01-21 18:45:33 +01:00
Martin Regen f8876e2f35 reduce usage of Task.Run
build debugType portable
2017-01-12 11:24:16 +01:00
Martin Regen a9958bb683 fix an exception on Linux when the /private cert folder doesn't exist 2017-01-12 09:52:15 +01:00
Martin Regen 5c370bd742 cert creation fixes
- certs were not created on Linux w. Openssl if a passcode was missing from the pkcs12 store
- stabilize the creation on windows where UWP is picky about the storage keys to use
- CR feedback
2016-12-08 18:35:31 +01:00
Martin Regen 2148d65084 improve cert handling of sample apps
- create self signed cert on first start (kudos to bouncy castle)
- fix path handling in many areas,
- ./ or ../ is treated as rooted dir
- special %LocalFolder% for UWP apps to allow to write certs in app temp storage
- all batch helpers to create certs removed
2016-12-07 18:29:24 +01:00
Martin Regen a62d11c3fb Basic256Sha256 support 2016-12-02 22:35:00 +01:00
Martin Regen da6b068f9b - CTT testing, improve various test cases, mostly disagnostic related. 2016-12-01 17:14:35 +01:00
Martin Regen 468b4449d8 fix cert and uri handling
- linux: x509 parsing fixed
- cert app uri should be used if cert is available
- endpoints and uri should contain the hostname not localhost
2016-11-11 10:08:02 +01:00
Martin Regen 057912c825 - Fixes found during a CTT test pass. Many fixes also due to sync with .Net codebase.
- Sync codebase of Opc.Ua libraries to UA.Net 1.03.340 source on github.
-CTT stress failures and exceptions all fixed.
-Roughly 2 dozen CTT tests are still with red bubbles. Mainly very special cases.
2016-10-07 16:20:25 +02:00
Erich Barnstedt 443c918d67 Merge pull request #60 from mregen/crl
Implement CRL support with Bouncy Castle. Tested with issuer certs fr…
2016-09-14 14:05:36 +02:00
Martin Regen 68ed5c07d5 cr feedback. keep set methods, but private. catch the bc exception and respect the throwOnError parameter. 2016-09-14 12:55:41 +02:00
Martin Regen 509d48d2c8 Implement CRL support with Bouncy Castle. Tested with issuer certs from OPC.Ua.CertificateGenerator. Also port latest security updates from UA.Net project. 2016-09-13 17:29:16 +02:00
Erich Barnstedt 5d565637dd Changes required for running UA applications on ASP.Net in the cloud. 2016-09-13 10:08:31 +02:00
Erich Barnstedt bfecd8bc8b 1. Removed "TestPackage" from NuGet configuration.
2. Added generate cert script to project files.
3. Made "\\" platform independent, even for .Net4 samples (apart from GDS samples).
4. Fixed cert validation popups (yes/no was reversed!).
5. Got GDS server and client samples running (no connection yet).
6. Fixed configuration and popups in GDS client.
2016-08-05 10:58:51 +02:00
Erich Barnstedt 4a0bc1429c Merge pull request #43 from mregen/standard
Got GDS compiling.
2016-08-04 06:18:36 -07:00