Commit Graph
31 Commits
Author SHA1 Message Date
Martin Regen 93146020a4 Certificate Validator tests and Pem writer fix (#701)
- add more tests verify how longer cert chains are built and verified with the cert validator
- some tweaks to cert factory to allow for building Sub CA certs
- allow to set the Basic Constraint  / Path Length for CA certs
- fix #695 PKCS#8 format is now used
- add additional check to verify incomplete chain signatures
2019-04-12 16:47:34 +02:00
Martin Regen 64db8c73a9 IOP GDS cert related fixes (#674)
* do not require server capabilities
* fixes for cert creation key usage flags
2019-03-18 12:37:04 +01:00
AlinMoldovean 8b374a7448 Copyright year set to 2019 in license notices. 2019-02-14 12:34:33 +02:00
Martin Regen ce4921988e Refactor gds internal interface to use cert group and type strings (#578)
…instead of node id

It simplifies storage of cert group and type in attached db as string.
All GDS unit tests pass.
Breaking change (for GDS) due to interface change.
2018-10-29 14:54:32 +01:00
Martin Regen d007a41d15 Add Aes profile support (#574)
* add the Aes128 and Aes256 profiles
* Aes profies were tested on IoP workshop against Ascolab, Softing, Matrikon, Milo, ProSys and others
* Pss padding is not supported on all platforms, so autodetect if it is supported and filter out Aes256 if not
* not a breaking change: not specifying the SecurityProfileUri in the config xml will automatically add all supported profiles but not deprecated profiles (e.g. Basic256Sha256, Aes128, Aes256). Aes256 is only added if the platform supports Pss padding. This will simplify the maintenance of config xml, since automatically all supported and secure profiles are exposed.
2018-10-29 09:58:45 +01:00
Martin Regen 493009dd53 Prototyping gds (#46)
* allow GDS configuration which doesn't auto approve
2018-09-25 12:20:50 +02:00
AlinMoldovean 4ed82868da Update GDS certificate stores after code review. 2018-09-13 15:30:14 +03:00
AlinMoldovean ed40dea643 Update GDS certificate stores after code review. 2018-09-13 15:26:18 +03:00
AlinMoldovean 9ff7f61fa1 Certificate stores renamed according to Part 12 specification recommendation. #383 2018-08-07 17:54:14 +03:00
Martin Regen ced33e1957 Improvements for cloud based Gds and V1.04 nodes (#508)
- all changes for cloud based GDS
 - build version of .net standard libs is now set in version.props, it may require updates for the official builds.
  - add new stuff for v1.04 nodeset, e.g. QueryApplications Api
  - gds.client/gds.server common dll changes to support a cloud based GDS.
2018-07-31 13:32:21 +02:00
Martin Regen e6916f31be License info in V1.04 is not quite right (#503)
* Use OPC REDISTRIBUTABLES Agreement of Use in nuget packages (#424)

* Security policy Basic128Rsa15 removed from default server configurations.
2018-07-17 17:31:59 +03:00
Martin Regen 23f0e3abd7 add App Uri to csr / test app uri in signing request. Use domain names in signing request. 2018-02-28 11:49:37 +01:00
Martin Regen b9a1a09937 Gds CA provider interface abstraction (#344)
* refactor GDS with a CA provider to allow replacement
* Fill push server list with FindServersOnNetwork
* feedback and issues found in IOP workshop
2018-02-06 14:26:01 +01:00
Martin Regen 4345640c03 Fix CR feedback & travis macOS build fix (#36)
* improve gds creation test, verifiy integrity of returned certs

* split test runs to avoid file handle problem on macOS

* cr feedback
2017-12-08 22:55:27 +01:00
Martin Regen fb5a676209 Gds improvements for SPS demo (#35)
* fixes in gds client app to support server push

* race condition with netcore 2.0.3 with docker

* more server entries

* Revert "race condition with netcore 2.0.3 with docker"

This reverts commit d983452e41dc29c1f3d8c5ca1ae7aa683275a68e.

* listener socket loss if AcceptAsync returns synchronous

* crl store misup

* default port for sps

* comment all changes in respect to UA ANSIC server

* all SPS changes

* remove demo code
2017-12-05 14:33:25 +01:00
Martin Regen 394f5baacf Implement cert update, more tests 2017-11-19 01:47:54 +01:00
Martin Regen 28e3e12cef make client tests configurable to use external GDS/push servers 2017-11-17 10:51:13 +01:00
Martin Regen 5b4bfbeac4 Mark GDS template in lib as 'sample' server 2017-11-16 23:10:12 +01:00
Martin Regen 5de112d59b macOS: cannot verify public/private key with crypto op when keyUsage doesn't allow dataencipherment 2017-11-16 15:14:41 +01:00
Martin Regen e156a3c3da PEM support (#33) 2017-11-15 21:08:43 +01:00
Martin Regen 09fbb05752 Gds work travis (#32)
fix appveyor and travis builds
2017-11-15 09:45:28 +01:00
Martin Regen 36e99a2e09 travis build linux 2017-11-12 22:43:55 +01:00
Martin Regen c87c3f04a6 server configuration
- implement trust list control write
- more test cases
2017-11-12 19:49:15 +01:00
Martin Regen 35f737d5af implement UpdateCertificate and self signed test case 2017-11-11 00:40:34 +01:00
Martin Regen bfeee65f8a enable server push in gds client, add a few test cases 2017-11-09 12:17:28 +01:00
Martin Regen 89646d04c5 small fixes, typos 2017-11-07 16:36:42 +01:00
Martin Regen 2ceaec4ab0 Implement GetCertStatus
add signing request test and more
fix QueryServers
2017-11-02 17:50:29 +01:00
Martin Regen e245446445 start key pair cert tests 2017-10-27 00:04:20 +02:00
Martin Regen f5f5cf2ecf implement more tests and missing server methods 2017-10-25 23:51:24 +02:00
Martin Regen 39939759c0 fix test namespace, rename client classes 2017-10-25 15:04:41 +02:00
Martin Regen edc8c89838 - add unit test client with nunit framework
- implement RegisterServer test case
2017-10-25 11:59:49 +02:00