Commit Graph

26 Commits

Author SHA1 Message Date
AlinMoldovean f5bee6ec7c Set default configuration of ReferenceServer to reject certificates with unknown revocation status. 2019-05-31 15:45:27 +03:00
AlinMoldovean 2fa6ba398d Set RejectUnknownRevocationStatus configuration flag to false by default in Reference Server 2019-05-23 12:57:02 +03:00
AlinMoldovean f062bfdc89 Compliance fixes in CertificateValidator.
Added setting in SecurityConfiguration to require revocation lists for all CAs
2019-05-21 17:42:59 +03:00
Martin Regen d007a41d15 Add Aes profile support (#574)
* add the Aes128 and Aes256 profiles
* Aes profies were tested on IoP workshop against Ascolab, Softing, Matrikon, Milo, ProSys and others
* Pss padding is not supported on all platforms, so autodetect if it is supported and filter out Aes256 if not
* not a breaking change: not specifying the SecurityProfileUri in the config xml will automatically add all supported profiles but not deprecated profiles (e.g. Basic256Sha256, Aes128, Aes256). Aes256 is only added if the platform supports Pss padding. This will simplify the maintenance of config xml, since automatically all supported and secure profiles are exposed.
2018-10-29 09:58:45 +01:00
AlinMoldovean 9ff7f61fa1 Certificate stores renamed according to Part 12 specification recommendation. #383 2018-08-07 17:54:14 +03:00
AlinMoldovean fd6d13a995 Create custom configuration settings for user certificates in ReferenceServer. #383 2018-08-06 17:22:23 +03:00
Alin Moldovean 92bef97e51 Fix for Mantix #4321 + deprecated security polices removed from config.xml files (#505)
* Fix for Mantis #4231. Refuse to use untrusted certificates to encrypt user identity tokens sent to servers.

* Deprecated security policies removed from default server config.xml files.
2018-07-18 08:28:07 +03:00
Martin Regen b068633b24 Fix https server start in quickstart apps (#386)
- add helper batch files to start / stop all apps
- distribute ports to be able to run all apps at the same time
- fix config files
- fix csproj to include libuv.dll for kestrel servers
- fix race condition in https listener
2018-03-08 20:50:04 +01:00
Martin Regen 5a1ba07619 enable server configuration for reference server and more. 2017-11-16 23:13:04 +01:00
Martin Regen 915ad5b87c - add cert configuration nodes
- Update cert and sign request is still missing
- no security!
2017-11-07 16:33:15 +01:00
Martin Regen 2742d4585c enable sha256 in ref server and fix cert validation check 038 (#247)
* enable sha256 in ref server and fix cert validation check 038

* fix localisation issue in authority key parser

* IOP Workshop: ref server doesn't set source timestamp

* Fix localisation issue with cert extension parsing

* fix exception when issuer cert has no auth key serial number/issuer
2017-09-25 17:13:41 +02:00
Softing 8eab49df07 Compliance fix for shutdown delay in ReferenceServer. 2017-07-14 12:40:13 +03:00
Martin Regen 1401a12e16 add method server factes, its supported 2017-06-30 11:54:41 +02:00
Martin Regen 0dfc14d94c fix Ref server project for VS 2017 2017-06-29 18:50:50 +02:00
Martin Regen 1db918c0cc set local=null if unspecified
Give ApplicationName default locale
remove locality in cert
remove unfinished node test in ref server
2017-06-20 16:59:58 +02:00
Martin Regen ca9a17dd77 add ServerProfileArray to Base Info Server Caps 2017-06-20 14:47:26 +02:00
Martin Regen faf4d1aa60 enable Sha256 for CTT1.3 2017-06-02 10:38:08 +02:00
Erich Barnstedt ef8fe340b6 1. Removed SecurityLevel from server config, it is now automatically calculated for each endpoint description.
2. Fixed spelling/grammar in a few places.
2017-05-08 12:29:57 +02:00
Martin Regen 232f554636 - regressions found during UACTT pass.
- add secure RNG for BC create cert function
2017-05-01 20:20:32 +02:00
Martin Regen fd5c9369fc Update all subject names 2017-04-27 17:49:43 +02:00
Martin Regen c0d2c7746f fix all .Net configs to use %CommonApplicationData% and LDS 2016-12-22 18:11:10 +01:00
Martin Regen 2148d65084 improve cert handling of sample apps
- create self signed cert on first start (kudos to bouncy castle)
- fix path handling in many areas,
- ./ or ../ is treated as rooted dir
- special %LocalFolder% for UWP apps to allow to write certs in app temp storage
- all batch helpers to create certs removed
2016-12-07 18:29:24 +01:00
Martin Regen da6b068f9b - CTT testing, improve various test cases, mostly disagnostic related. 2016-12-01 17:14:35 +01:00
Martin Regen d72724e80c update known working security policies, disable auto accept 2016-11-12 09:00:09 +01:00
Martin Regen 90f3445280 fix reference server build issues on new clone 2016-11-03 10:49:54 +01:00
Martin Regen f806f10980 Port UA Reference server for CTT testing to .Net StandardLibrary 2016-11-02 14:25:45 +01:00