mirror of
https://github.com/OPCFoundation/UA-.NETStandard.git
synced 2026-10-21 09:06:37 +08:00
20c2d77d57
> **Stacked on #4569.** The base branch is `romanett/practical-murdock-fd9c56`, so this diff shows only the commits of this PR. Retarget to `master` after #4569 merges. ## Summary Bug audit of `Opc.Ua.Core`, `Opc.Ua.Core.Types`, `Opc.Ua.Types` and `Opc.Ua.Core.Schema`, with the findings fixed and the fixes grounded against the OPC UA specification (reference.opcfoundation.org). 133 commits in four groups: 1. **Audit fixes** (`Fix <ID>: ...`): 116 findings from a read-only audit, each with a regression test. IDs follow the audit scopes: T1-T6 `Opc.Ua.Types`, C1-C4 `Opc.Ua.Core`, S1 `Opc.Ua.Core.Types` + `Opc.Ua.Core.Schema`. 2. **Review fixes** (`Fix review <ID>: ...`): issues a code review of group 1 found, plus lower-severity leftovers. 3. **Spec fixes** (`Spec: #<n> ...`): the 18 places where an earlier fix only partly matched the spec text. 4. Test and analyzer follow-ups. Where `master` (#4516, #4522, #4540, #4564) or #4569 already fixed the same issue, their version was kept and this PR only adds what they didn't cover. ## Behaviour and user-facing changes ### Wire format and interoperability (breaking) - **PubSub AES-CTR (Aes128-CTR / Aes256-CTR)** now follows Part 14 Tables 156/157: - The counter block is `KeyNonce[4] | MessageNonce[8] | BlockCounter[4]`, and the block counter starts at 1. - The SecurityHeader nonce is 8 bytes: `Random[4] | UInt32 SequenceNumber`, with the sequence number starting at 1. - SKS key data is split with a 4-byte KeyNonce, giving 52 / 68 bytes. - **Not interoperable with earlier releases of this stack**, but matches the spec. There is a test against the independent RFC 3686 vector. - **User token signature** (Part 4 6.1.8): - The signed data is now built from the user token policy's SecurityPolicy on both client and server. - It also supports the SecurityMode None layout `ServerNonce | HASH(ServerCertificate) | ClientNonce`. - New overload `SecurityPolicyInfo.GetUserTokenSignatureData(..., MessageSecurityMode)`. - **Secure channel:** - The ECC AEAD `LastSequenceNumber` is correct across the 32-bit sequence wrap (Part 6 6.8.1). - The incoming chunk counts against MaxChunkCount/MaxMessageSize. - The sender no longer lets a message through that is 24 bytes over MaxMessageSize. - The OPN response signature is verified without overrunning the buffer (RSA_DH with differing key sizes). ### Sessions (server) - **CreateSession nonce:** - The client nonce is kept on None channels, because the None-mode user token signature covers it. - A nonce over 128 bytes returns `Bad_NonceInvalid` on every channel (Part 4 5.7.2.3). - The duplicate-nonce check runs only on secured channels. - A non-empty nonce under 32 bytes is still accepted on None, for compatibility. - **ActivateSession:** an embedded `EccEncryptedSecret` signing certificate is validated with the server's peer certificate validator (Part 6 6.8.3). Byte equality with the client certificate is only the fallback when no validator is available. New opt-in interface `ICertificateValidatorProvider`. - **FindServers / GetEndpoints:** `GatewayServerUri` and `DiscoveryProfileUri` are no longer swapped. ### Write, Read and Call (NodeState / node managers) - **UserWriteMask:** - Enforced for non-value attributes and for VariableType Value writes (`ValueForVariableType`), returning `Bad_UserAccessDenied`. - An unconfigured UserWriteMask (0, no handler) is not enforced, and reads back as the WriteMask so Read and Write agree (Part 3 8.60). - A throwing or Bad `OnReadUserWriteMask` handler fails only that item. - **Index-range writes:** - Slices are merged into the cached value under the attribute lock, also for `OnWriteValueAsync` handlers. - A data-change notification is still produced when the cache cannot absorb the slice. - The slice must match the unclipped range, otherwise `Bad_IndexRangeDataMismatch` (new status code in `Opc.Ua.Types`). - A range past the target returns `Bad_IndexRangeNoData`. - A handler without index-range support returns `Bad_WriteNotSupported` (Part 4 7.27, 5.11.4.4). - **Index-range reads on matrices** return partial results clipped to the source, instead of allocating the requested size (a Read with `"0:40000,0:40000"` no longer allocates about 1.6e9 elements). - **DataTypeDefinition writes:** - A value that isn't a decoded DataTypeDefinition, or whose kind doesn't match the DataType category, returns `Bad_TypeMismatch`. - Null is rejected for concrete Structure/Enumeration/OptionSet types. - WriteMask is checked first (Part 3 5.8.3). - **AnalogItem:** a null write skips the InstrumentRange check again. - **Method call:** the async fallback passes the ObjectId to the method handlers. - **Redundancy:** `DistributedValueParticipation` merges index-range writes and applies the index range on reads. - **Change masks:** `ClearChangeMasks` takes the bits atomically, so concurrent changes are no longer lost. - **`AccessLevelEx`:** preserved by Clone/Export. ### Alarms & Conditions (Part 9) - **Acknowledge / Confirm / AddComment:** - Accept any EventId the condition or its branches reported while that state is still pending (5.7.3). - An unknown id returns `Bad_EventIdUnknown`. - An already handled state returns `Bad_ConditionBranchAlreadyAcked` / `...AlreadyConfirmed`. - AddComment on a branch no longer changes the trunk, and the branch table is re-keyed when a branch's EventId changes. - **Shelving:** - OneShotShelve without MaxTimeShelved no longer overflows the timer. - A timed shelve is measured on the monotonic clock, so wall-clock steps don't delay the unshelve. - The state is named `OneShotShelved`. - **Audit events:** - They report failure for rejected method calls. - `SelectedResponse` is a UInt32. - A rejected negative Respond leaves SelectedResponse unset. - **`ContentFilterElement.Validate`:** an unknown FilterOperator is reported per element as `Bad_FilterOperatorInvalid`, instead of failing the whole service call. ### ContentFilter evaluation (Part 4 7.7.3, on top of #4564) - **Bitwise operators:** - The result takes the size of the larger operand. - Boolean, numeric String and one-element array operands are converted to integers implicitly. - Types without an implicit integer conversion give NULL. - **Strings:** ordering is ordinal, no longer culture dependent. - **Cast:** restricted to the Table 121 conversions, and QualifiedName to LocalizedText is added. The general `Variant.ConvertTo` keeps its wider set. - **Null and empty operands:** - `Like` with a NULL operand is NULL. - Empty arrays of the same DataType compare equal. - Null-string operands are NULL everywhere. ### Encoders and built-in types - **XML:** - Strings keep leading, trailing and whitespace-only content (Part 6 5.3.1.5). NodeSet import opts back into treating whitespace-only strings as empty with the new `XmlDecoder.TreatWhitespaceOnlyStringsAsEmpty`. - Layout whitespace around `<Identifier>` values is ignored, and trailing control characters are stripped from `s=` ids. - `XmlElement` ignores DTDs without expanding entities. - **JSON:** - A DateTime without an offset is read as UTC. - An unmappable `nsu=` NodeId and an unknown `svu=` ExpandedNodeId decode to a namespace-0 String NodeId (5.4.2.10 / 5.4.2.11). - `svr=` is rejected in a NodeId field. - Bad matrix dimensions return `BadDecodingError`. - The non-strict body stack stays balanced after an error. - The nesting limits match between encoder and decoder. - **Binary:** - `MaxByteStringLength` no longer applies to strings. - ExtensionObject bodies count toward the nesting limit on seekable streams (and in the XML encoder). - **Parsing:** - The NodeId parser requires `i=`/`s=`/`g=`/`b=`. - `ExpandedNodeId.Parse` rejects an empty `nsu=`/`svu=`. - NumericRange rejects a trailing `,` with `Bad_IndexRangeInvalid`. - RelativePath escapes `#`. - **Status codes:** `StatusCode.WithSubCode`/`WithCodeBits` keep the severity bits and look up the symbolic id for the new code. - **Variant / VariantHelper:** - `TryCastTo` returns false on a type mismatch. So `DataValue.GetValue<T>(default)` returns the default, and `GetValueOrDefault` / `CastTo` throw `BadTypeMismatch` as documented. - `System.DateTime` casts are supported. - Concrete encodeable arrays (e.g. `Argument[]`) no longer throw. - `ConvertTo` keeps one-element and empty arrays as arrays and checks the conversion is legal for empty arrays. - `CastFrom(object[])`, `CastFrom(Enum[])` and the obsolete `Variant(object)` constructors keep the array shape (previously a one-element array collapsed to a scalar and an empty one to Null). - `TypeInfo.Unknown` / `Variant.Null.TypeInfo` report `ValueRanks.Any`. - **Equality and hashing contracts fixed:** - Types: Matrix/MatrixOf, typed-null Variants, NodeId (the namespace index is now hashed), ExpandedNodeId, LocalizedText, DiagnosticInfo, StructureDefinition/EnumDefinition, CertificateIdentifier, UserIdentity and DateTimeUtc. - `MatrixOf.Dimensions` returns a copy. - Decimal equality and hashing now run in bounded time. - **Localized text:** a LocalizedText with locale `"mul"` and no usable translations, or null client locale ids, no longer throw. ### NodeSet, address space and utilities - **NodeSet export/import:** - Server index 0 is the local server on import and export, so local ids are no longer written as `svr=65535`. - `StructureDefinition.BaseDataType` is filled from the supertype on import. - **`NodeTable.Import`:** replaces duplicates, keeping the references neighbouring nodes hold. `TypeTable.Add` detaches a re-parented type from its old supertype, and `Node.Clone` gets its own ReferenceTable. - **`StringTable` / `NamespaceTable`:** capped at UInt16 indexes (`BadEncodingLimitsExceeded`) for Append and Update, instead of silently wrapping. - **Small fixes:** - `UnsecureRandom.Shared` is seeded randomly. - The peer's RetryAfterMs is clamped to one day. - The `CancelAsync` and `string.GetHashCode(StringComparison)` polyfills match BCL behaviour. - `CoreUtils.IsEqual` compares strings ordinally. ### Schema generation and ComplexTypeSystem - **JSON schema:** describes the 1.05 layout with the compact/verbose null rules, and now validates real `JsonEncoder` output. - **XSD:** - `EncodingMask` (`xs:unsignedLong`) only for StructureWithOptionalFields. - Guid and StatusCode are complex types. - Standard types are in the `Types.xsd` namespace. - **Structure-backed OptionSets** are described as `{Value, ValidBits}`. New `UaTypeDescription.IsStructureOptionSet` property and constructor overload. - **ComplexTypeSystem:** - A malformed type in a server dictionary is skipped per type instead of discarding the whole dictionary. - Cyclic supertype walks are bounded. - Declared definitions are no longer changed. - A dictionary validator is kept only if the dictionary parsed. ### Certificates and trust lists (Part 4 6.1.3, Part 12) - **Revocation:** - Checked for issuers supplied in the peer's chain and for inline-trusted issuers, against the CRLs in the trusted and issuer stores. - A store without CRL support no longer hides "revocation unknown". - `RejectUnknownRevocationStatus` is honoured for inline-trusted issuers unless the entry sets `SuppressRevocationStatusUnknown`. This changes the strict case of `ExplicitIssuerChainIsHonoredWithoutStorePathAsync`. - **Basic constraints / path length** violations fail with `Bad_CertificateInvalid`. - **`TreatAsInvalid`:** - Now yields `Bad_CertificateUntrusted`, which can't be suppressed or auto-accepted. - It is honoured on individual trust-list entries even when the certificate is also in a store. - **`EccEncryptedSecret`:** enforces the result of validating the sender certificate. - **`TrustListTransaction`:** - Routes each CRL to the store holding its issuer (TrustedCrls/IssuerCrls). - Validates staged CRLs, including the store's CRL support, before changing anything. - Applies certificates before CRLs. - **Other:** - One failing `CertificateChanges` observer no longer stops the others. - `InMemory:` stores share their contents per path, and `InMemoryStoreProvider` is `IDisposable`. ### WoT (`Opc.Ua.Types/Wot`) - **Projection security:** projection security schemes whose qualified names collide are refused. New diagnostic `WotDiagnosticCode.ProjectionSecurityConflict = 6063`. - **Input handling:** - Invalid Unicode (lone surrogates, bad UTF-8) is rejected as `JsonException`. - External-schema results are keyed per affordance. - A duplicate security-floor member is rejected. - `nsu=` ids are percent-encoded (Part 6 5.1.12). - The configured JSON depth is honoured on re-parse. - An oversized document is reported before it is parsed back. - **Performance and limits:** - Subtype-graph validation, `componentOf` linking and the namespace table are now linear. - Namespaces are capped at UInt16. ### New or changed public API - `ICertificateValidatorProvider` (server) - `SecurityPolicyInfo.GetUserTokenSignatureData(..., MessageSecurityMode)` overload - `XmlDecoder.TreatWhitespaceOnlyStringsAsEmpty` - `UaTypeDescription.IsStructureOptionSet` plus a constructor overload - `WotDiagnosticCode.ProjectionSecurityConflict` - `StatusCodes.BadIndexRangeDataMismatch` in the `Opc.Ua.Types` list - `InMemoryStoreProvider : IDisposable` ## Not changed / open - **Deferred:** - S1-14 (BSD OptionSet size needs the base type in `UaTypeDescription`, and BSD is deprecated). - C2-7 (restoring the own-certificate trust exemption would accept certificates the spec says to reject; removing the dead code is a separate decision). - A1-4 (config values keep surrounding whitespace, as the pre-April-2026 loader did). - H-2 (JsonDecoder has no real nesting counter). - A2-3 (the StringTable cap also applies to diagnostics tables; default `MaxArrayLength` already bounds them). - **Needs a product decision:** - The general `ConvertToString` writes a QualifiedName as `ns:Name`, while Table 121 drops the namespace. - Short (< 32 byte) client nonces are accepted on None channels. ## Verification - Every commit added a regression test that fails without its fix, where practical. - Before the rebases, with all audit and review fixes (before the `Spec: #…` commits): 0 build warnings and 16 test suites green on net10.0. The suites: Types, Core, Core.Encoders, Core.Security, Core.Schema, Client, Client.ComplexTypes, Server, Sessions, Gds, History, Features, Redundancy.Server, PubSub, WotCon and WotCon.Bindings. Core hit its known intermittent end-of-run hang once, and reruns were clean. - The `Spec: #…` fixes were verified per group on their own suites. Those include PubSub.Udp, Redundancy.PubSub, PubSub.Server, Configuration and SourceGeneration.Core. - **Not yet built or tested on this base.** It was rebased onto master (resolving overlaps with #4522, #4540 and #4564) and then onto #4569. This PR stays a draft until the full run on this base is green. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: marcschier <11168470+marcschier@users.noreply.github.com> Co-authored-by: Marc Schier <marcschier@users.noreply.github.com>
513 lines
21 KiB
C#
513 lines
21 KiB
C#
/* ========================================================================
|
|
* Copyright (c) 2005-2026 The OPC Foundation, Inc. All rights reserved.
|
|
*
|
|
* OPC Foundation MIT License 1.00
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person
|
|
* obtaining a copy of this software and associated documentation
|
|
* files (the "Software"), to deal in the Software without
|
|
* restriction, including without limitation the rights to use,
|
|
* copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the
|
|
* Software is furnished to do so, subject to the following
|
|
* conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be
|
|
* included in all copies or substantial portions of the Software.
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
|
|
* OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
|
|
* HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
|
|
* WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
|
|
* OTHER DEALINGS IN THE SOFTWARE.
|
|
*
|
|
* The complete license agreement can be found here:
|
|
* http://opcfoundation.org/License/MIT/1.00/
|
|
* ======================================================================*/
|
|
|
|
using System;
|
|
using System.Collections.Generic;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Threading;
|
|
using System.Threading.Channels;
|
|
using System.Threading.Tasks;
|
|
using NUnit.Framework;
|
|
using Opc.Ua.PubSub.Application;
|
|
using Opc.Ua.PubSub.Configuration;
|
|
using Opc.Ua.PubSub.DataSets;
|
|
using Opc.Ua.PubSub.Encoding;
|
|
using Opc.Ua.PubSub.MetaData;
|
|
using Opc.Ua.PubSub.Security;
|
|
using Opc.Ua.PubSub.Security.Policies;
|
|
using Opc.Ua.PubSub.Transports;
|
|
using Opc.Ua.Tests;
|
|
|
|
namespace Opc.Ua.PubSub.Tests.Application
|
|
{
|
|
/// <summary>
|
|
/// Verifies that a Subscriber uses the DataSetMetaData configured on its
|
|
/// DataSetReader to decode RawData DataSetMessages when it runs separately
|
|
/// from the Publisher and shares no metadata registry with it, per
|
|
/// <see href="https://reference.opcfoundation.org/specs/OPC-10000-14/v1.05.06/6.2.9.4">
|
|
/// Part 14 §6.2.9.4</see>.
|
|
/// </summary>
|
|
[TestFixture]
|
|
[TestSpec("6.2.9.4")]
|
|
[CancelAfter(30000)]
|
|
public sealed class SubscriberDataSetMetaDataTests
|
|
{
|
|
private const string Address = "opc.udp://239.0.0.1:4840";
|
|
private const string SecurityGroupId = "SubscriberMetaDataGroup";
|
|
private const string DataSetName = "Simple";
|
|
private const string ReaderName = "Reader 1";
|
|
private const ushort PublisherIdValue = 1;
|
|
private const ushort WriterGroupId = 100;
|
|
private const ushort DataSetWriterId = 1;
|
|
|
|
[TestCase(MessageSecurityMode.SignAndEncrypt)]
|
|
[TestCase(MessageSecurityMode.None)]
|
|
public async Task SeparateSubscriberDecodesRawDataWithConfiguredMetaDataAsync(
|
|
MessageSecurityMode securityMode)
|
|
{
|
|
var bus = new InMemoryBus();
|
|
var sink = new FirstDataSetSink();
|
|
|
|
await using IPubSubApplication subscriber = CreateBuilder(bus, securityMode)
|
|
.WithApplicationId("urn:test:subscriber")
|
|
.UseConfiguration(CreateSubscriberConfiguration(
|
|
securityMode, PublisherIdValue, WriterGroupId))
|
|
.AddSubscribedDataSetSink(ReaderName, sink)
|
|
.Build();
|
|
await using IPubSubApplication publisher = CreateBuilder(bus, securityMode)
|
|
.WithApplicationId("urn:test:publisher")
|
|
.UseConfiguration(CreatePublisherConfiguration(securityMode))
|
|
.AddDataSetSource(DataSetName, new CounterSource())
|
|
.Build();
|
|
|
|
await subscriber.StartAsync().ConfigureAwait(false);
|
|
await publisher.StartAsync().ConfigureAwait(false);
|
|
|
|
IReadOnlyList<DataSetField> fields = await sink.FirstDataSet
|
|
.WaitAsync(TimeSpan.FromSeconds(10))
|
|
.ConfigureAwait(false);
|
|
|
|
Assert.That(fields, Has.Count.EqualTo(2));
|
|
Assert.Multiple(() =>
|
|
{
|
|
Assert.That(fields[0].Name, Is.EqualTo("Counter"));
|
|
Assert.That(fields[0].Value.TryGetValue(out int counter), Is.True);
|
|
Assert.That(counter, Is.GreaterThan(0));
|
|
Assert.That(fields[1].Name, Is.EqualTo("Toggle"));
|
|
});
|
|
}
|
|
|
|
[Test]
|
|
public async Task BuildRegistersMetaDataOfReaderWithExactFilterAsync()
|
|
{
|
|
await using IPubSubApplication subscriber = CreateBuilder(
|
|
new InMemoryBus(), MessageSecurityMode.None)
|
|
.WithApplicationId("urn:test:subscriber")
|
|
.UseConfiguration(CreateSubscriberConfiguration(
|
|
MessageSecurityMode.None, PublisherIdValue, WriterGroupId))
|
|
.Build();
|
|
|
|
MetaDataMatchResult result = subscriber.MetaDataRegistry.TryGet(
|
|
ReaderKey(WriterGroupId),
|
|
out DataSetMetaDataType? metaData);
|
|
|
|
Assert.That(result, Is.EqualTo(MetaDataMatchResult.Match));
|
|
Assert.That(metaData!.Fields.Count, Is.EqualTo(2));
|
|
}
|
|
|
|
[Test]
|
|
public async Task BuildDoesNotRegisterMetaDataOfReaderWithWildcardFilterAsync()
|
|
{
|
|
await using IPubSubApplication subscriber = CreateBuilder(
|
|
new InMemoryBus(), MessageSecurityMode.None)
|
|
.WithApplicationId("urn:test:subscriber")
|
|
.UseConfiguration(CreateSubscriberConfiguration(
|
|
MessageSecurityMode.None, PublisherIdValue, writerGroupId: 0))
|
|
.Build();
|
|
|
|
Assert.That(subscriber.MetaDataRegistry.Keys.Count, Is.Zero);
|
|
}
|
|
|
|
[Test]
|
|
public async Task ReaderMetaDataDoesNotReplacePublishedDataSetMetaDataAsync()
|
|
{
|
|
PubSubConfigurationDataType configuration =
|
|
CreatePublisherConfiguration(MessageSecurityMode.None);
|
|
PubSubConfigurationDataType readers = CreateSubscriberConfiguration(
|
|
MessageSecurityMode.None, PublisherIdValue, WriterGroupId);
|
|
configuration.Connections[0].ReaderGroups = readers.Connections[0].ReaderGroups;
|
|
configuration.Connections[0].ReaderGroups[0].DataSetReaders[0]
|
|
.DataSetMetaData.Name = "ReaderView";
|
|
|
|
await using IPubSubApplication application = CreateBuilder(
|
|
new InMemoryBus(), MessageSecurityMode.None)
|
|
.WithApplicationId("urn:test:loopback")
|
|
.UseConfiguration(configuration)
|
|
.AddDataSetSource(DataSetName, new CounterSource())
|
|
.Build();
|
|
|
|
application.MetaDataRegistry.TryGet(
|
|
ReaderKey(WriterGroupId),
|
|
out DataSetMetaDataType? metaData);
|
|
|
|
Assert.That(metaData!.Name, Is.EqualTo(DataSetName));
|
|
}
|
|
|
|
private static DataSetMetaDataKey ReaderKey(ushort writerGroupId)
|
|
{
|
|
return new DataSetMetaDataKey(
|
|
PublisherId.FromUInt16(PublisherIdValue),
|
|
writerGroupId,
|
|
DataSetWriterId,
|
|
Uuid.Empty,
|
|
1);
|
|
}
|
|
|
|
private static PubSubApplicationBuilder CreateBuilder(
|
|
InMemoryBus bus,
|
|
MessageSecurityMode securityMode)
|
|
{
|
|
PubSubApplicationBuilder builder = new PubSubApplicationBuilder(
|
|
NUnitTelemetryContext.Create())
|
|
.UseAllStandardEncoders()
|
|
.AddTransportFactory(new InMemoryBusTransportFactory(bus));
|
|
if (securityMode != MessageSecurityMode.None)
|
|
{
|
|
builder.AddSecurityKeyProvider(CreateKeyProvider());
|
|
}
|
|
return builder;
|
|
}
|
|
|
|
private static PubSubConfigurationDataType CreatePublisherConfiguration(
|
|
MessageSecurityMode securityMode)
|
|
{
|
|
return PubSubConfigurationBuilder.Create()
|
|
.AddPublishedDataSet(DataSetName, dataSet => dataSet
|
|
.AddField("Counter", (byte)BuiltInType.Int32, DataTypeIds.Int32)
|
|
.AddField("Toggle", (byte)BuiltInType.Boolean, DataTypeIds.Boolean))
|
|
.AddConnection("Publisher Connection", connection => connection
|
|
.WithPublisherId(new Variant(PublisherIdValue))
|
|
.WithTransportProfile(Profiles.PubSubUdpUadpTransport)
|
|
.WithAddress(Address)
|
|
.AddWriterGroup("WriterGroup 1", group =>
|
|
{
|
|
group
|
|
.WithWriterGroupId(WriterGroupId)
|
|
.WithPublishingInterval(50)
|
|
.WithMessageSettings(new UadpWriterGroupMessageDataType
|
|
{
|
|
DataSetOrdering = DataSetOrderingType.AscendingWriterId,
|
|
NetworkMessageContentMask = (uint)NetworkMessageContentMask
|
|
})
|
|
.WithTransportSettings(new DatagramWriterGroupTransportDataType());
|
|
if (securityMode != MessageSecurityMode.None)
|
|
{
|
|
group.WithSecurity(
|
|
securityMode,
|
|
SecurityGroupId,
|
|
"opc.tcp://localhost:4840/SecurityKeyService");
|
|
}
|
|
group.AddDataSetWriter("Writer 1", writer => writer
|
|
.WithDataSetWriterId(DataSetWriterId)
|
|
.WithDataSetName(DataSetName)
|
|
.WithKeyFrameCount(1)
|
|
.WithFieldContentMask(DataSetFieldContentMask.RawData)
|
|
.WithMessageSettings(new UadpDataSetWriterMessageDataType
|
|
{
|
|
DataSetMessageContentMask = (uint)DataSetMessageContentMask
|
|
}));
|
|
}))
|
|
.Build();
|
|
}
|
|
|
|
private static PubSubConfigurationDataType CreateSubscriberConfiguration(
|
|
MessageSecurityMode securityMode,
|
|
ushort publisherId,
|
|
ushort writerGroupId)
|
|
{
|
|
return PubSubConfigurationBuilder.Create()
|
|
.AddConnection("Subscriber Connection", connection => connection
|
|
.WithPublisherId(new Variant(publisherId))
|
|
.WithTransportProfile(Profiles.PubSubUdpUadpTransport)
|
|
.WithAddress(Address)
|
|
.AddReaderGroup("ReaderGroup 1", group =>
|
|
{
|
|
if (securityMode != MessageSecurityMode.None)
|
|
{
|
|
group.WithSecurity(
|
|
securityMode,
|
|
SecurityGroupId,
|
|
"opc.tcp://localhost:4840/SecurityKeyService");
|
|
}
|
|
group.AddDataSetReader(ReaderName, reader => reader
|
|
.WithFilter(new Variant(publisherId), writerGroupId, DataSetWriterId)
|
|
.WithFieldContentMask(DataSetFieldContentMask.RawData)
|
|
.WithMessageReceiveTimeout(5000)
|
|
.WithMirrorSubscribedDataSet(ReaderName)
|
|
.WithMessageSettings(new UadpDataSetReaderMessageDataType
|
|
{
|
|
NetworkMessageContentMask = (uint)NetworkMessageContentMask,
|
|
DataSetMessageContentMask = (uint)DataSetMessageContentMask
|
|
})
|
|
.WithDataSetMetaData(DataSetName, metaData => metaData
|
|
.WithoutFieldIds()
|
|
.AddField("Counter", (byte)BuiltInType.Int32, DataTypeIds.Int32)
|
|
.AddField("Toggle", (byte)BuiltInType.Boolean, DataTypeIds.Boolean)));
|
|
}))
|
|
.Build();
|
|
}
|
|
|
|
private static UadpNetworkMessageContentMask NetworkMessageContentMask =>
|
|
UadpNetworkMessageContentMask.PublisherId |
|
|
UadpNetworkMessageContentMask.GroupHeader |
|
|
UadpNetworkMessageContentMask.WriterGroupId |
|
|
UadpNetworkMessageContentMask.PayloadHeader |
|
|
UadpNetworkMessageContentMask.NetworkMessageNumber |
|
|
UadpNetworkMessageContentMask.SequenceNumber;
|
|
|
|
// No MajorVersion or MinorVersion: the Subscriber cannot compare versions.
|
|
private static UadpDataSetMessageContentMask DataSetMessageContentMask =>
|
|
UadpDataSetMessageContentMask.Status |
|
|
UadpDataSetMessageContentMask.SequenceNumber;
|
|
|
|
private static StaticSecurityKeyProvider CreateKeyProvider()
|
|
{
|
|
PubSubAes256CtrPolicy policy = PubSubAes256CtrPolicy.Instance;
|
|
byte[] signing = new byte[policy.SigningKeyLength];
|
|
byte[] encrypting = new byte[policy.EncryptingKeyLength];
|
|
byte[] nonce = new byte[AesCtrNonceLayout.KeyNonceLength];
|
|
for (int i = 0; i < signing.Length; i++)
|
|
{
|
|
signing[i] = (byte)(i + 1);
|
|
}
|
|
for (int i = 0; i < encrypting.Length; i++)
|
|
{
|
|
encrypting[i] = (byte)(i + 100);
|
|
}
|
|
for (int i = 0; i < nonce.Length; i++)
|
|
{
|
|
nonce[i] = (byte)(i + 200);
|
|
}
|
|
|
|
var key = new PubSubSecurityKey(
|
|
1U,
|
|
ByteString.Create(signing),
|
|
ByteString.Create(encrypting),
|
|
ByteString.Create(nonce),
|
|
DateTimeUtc.From(DateTime.UtcNow),
|
|
TimeSpan.FromMinutes(60));
|
|
var ring = new PubSubSecurityKeyRing(SecurityGroupId);
|
|
ring.SetCurrent(key);
|
|
return new StaticSecurityKeyProvider(SecurityGroupId, ring);
|
|
}
|
|
|
|
/// <summary>
|
|
/// Produces an increasing counter and a toggle for each sample.
|
|
/// </summary>
|
|
private sealed class CounterSource : IPublishedDataSetSource
|
|
{
|
|
public DataSetMetaDataType BuildMetaData()
|
|
{
|
|
return new DataSetMetaDataType
|
|
{
|
|
Name = DataSetName,
|
|
DataSetClassId = Uuid.Empty,
|
|
Fields =
|
|
[
|
|
new FieldMetaData
|
|
{
|
|
Name = "Counter",
|
|
BuiltInType = (byte)BuiltInType.Int32,
|
|
DataType = DataTypeIds.Int32,
|
|
ValueRank = ValueRanks.Scalar
|
|
},
|
|
new FieldMetaData
|
|
{
|
|
Name = "Toggle",
|
|
BuiltInType = (byte)BuiltInType.Boolean,
|
|
DataType = DataTypeIds.Boolean,
|
|
ValueRank = ValueRanks.Scalar
|
|
}
|
|
],
|
|
ConfigurationVersion = new ConfigurationVersionDataType
|
|
{
|
|
MajorVersion = 1,
|
|
MinorVersion = 0
|
|
}
|
|
};
|
|
}
|
|
|
|
public ValueTask<PublishedDataSetSnapshot> SampleAsync(
|
|
DataSetMetaDataType metaData,
|
|
CancellationToken cancellationToken = default)
|
|
{
|
|
int counter = Interlocked.Increment(ref m_counter);
|
|
ArrayOf<DataSetField> fields =
|
|
[
|
|
new DataSetField { Name = "Counter", Value = new Variant(counter) },
|
|
new DataSetField { Name = "Toggle", Value = new Variant((counter & 1) == 0) }
|
|
];
|
|
return new ValueTask<PublishedDataSetSnapshot>(
|
|
new PublishedDataSetSnapshot(
|
|
metaData.ConfigurationVersion ?? new ConfigurationVersionDataType(),
|
|
fields,
|
|
DateTimeUtc.From(DateTime.UtcNow)));
|
|
}
|
|
|
|
private int m_counter;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Completes with the fields of the first received DataSet.
|
|
/// </summary>
|
|
private sealed class FirstDataSetSink : ISubscribedDataSetSink
|
|
{
|
|
public Task<IReadOnlyList<DataSetField>> FirstDataSet => m_first.Task;
|
|
|
|
public ValueTask WriteAsync(
|
|
IReadOnlyList<DataSetField> fields,
|
|
CancellationToken cancellationToken = default)
|
|
{
|
|
m_first.TrySetResult(fields);
|
|
return default;
|
|
}
|
|
|
|
private readonly TaskCompletionSource<IReadOnlyList<DataSetField>> m_first =
|
|
new(TaskCreationOptions.RunContinuationsAsynchronously);
|
|
}
|
|
|
|
/// <summary>
|
|
/// Delivers every frame sent by any transport of the bus to every
|
|
/// transport of the bus, like a datagram group on one host.
|
|
/// </summary>
|
|
private sealed class InMemoryBus
|
|
{
|
|
public void Attach(Channel<byte[]> receiver)
|
|
{
|
|
lock (m_lock)
|
|
{
|
|
m_receivers.Add(receiver);
|
|
}
|
|
}
|
|
|
|
public void Detach(Channel<byte[]> receiver)
|
|
{
|
|
lock (m_lock)
|
|
{
|
|
m_receivers.Remove(receiver);
|
|
}
|
|
}
|
|
|
|
public void Send(ReadOnlyMemory<byte> payload)
|
|
{
|
|
Channel<byte[]>[] receivers;
|
|
lock (m_lock)
|
|
{
|
|
receivers = [.. m_receivers];
|
|
}
|
|
foreach (Channel<byte[]> receiver in receivers)
|
|
{
|
|
receiver.Writer.TryWrite(payload.ToArray());
|
|
}
|
|
}
|
|
|
|
private readonly Lock m_lock = new();
|
|
private readonly List<Channel<byte[]>> m_receivers = [];
|
|
}
|
|
|
|
private sealed class InMemoryBusTransportFactory : IPubSubTransportFactory
|
|
{
|
|
public InMemoryBusTransportFactory(InMemoryBus bus)
|
|
{
|
|
m_bus = bus;
|
|
}
|
|
|
|
public string TransportProfileUri => Profiles.PubSubUdpUadpTransport;
|
|
|
|
public IPubSubTransport Create(
|
|
PubSubConnectionDataType connection,
|
|
ITelemetryContext telemetry,
|
|
TimeProvider timeProvider)
|
|
{
|
|
return new InMemoryBusTransport(m_bus);
|
|
}
|
|
|
|
private readonly InMemoryBus m_bus;
|
|
}
|
|
|
|
private sealed class InMemoryBusTransport : IPubSubTransport
|
|
{
|
|
public InMemoryBusTransport(InMemoryBus bus)
|
|
{
|
|
m_bus = bus;
|
|
}
|
|
|
|
public string TransportProfileUri => Profiles.PubSubUdpUadpTransport;
|
|
|
|
public PubSubTransportDirection Direction => PubSubTransportDirection.SendReceive;
|
|
|
|
public bool IsConnected { get; private set; }
|
|
|
|
public event EventHandler<PubSubTransportStateChangedEventArgs>? StateChanged
|
|
{
|
|
add { }
|
|
remove { }
|
|
}
|
|
|
|
public ValueTask OpenAsync(CancellationToken cancellationToken = default)
|
|
{
|
|
m_bus.Attach(m_received);
|
|
IsConnected = true;
|
|
return default;
|
|
}
|
|
|
|
public ValueTask CloseAsync(CancellationToken cancellationToken = default)
|
|
{
|
|
m_bus.Detach(m_received);
|
|
IsConnected = false;
|
|
return default;
|
|
}
|
|
|
|
public ValueTask SendAsync(
|
|
ReadOnlyMemory<byte> payload,
|
|
string? topic = null,
|
|
CancellationToken cancellationToken = default)
|
|
{
|
|
m_bus.Send(payload);
|
|
return default;
|
|
}
|
|
|
|
public async IAsyncEnumerable<PubSubTransportFrame> ReceiveAsync(
|
|
[EnumeratorCancellation] CancellationToken cancellationToken = default)
|
|
{
|
|
while (await m_received.Reader.WaitToReadAsync(cancellationToken)
|
|
.ConfigureAwait(false))
|
|
{
|
|
while (m_received.Reader.TryRead(out byte[]? frame))
|
|
{
|
|
yield return new PubSubTransportFrame(
|
|
frame, null, DateTimeUtc.From(DateTime.UtcNow));
|
|
}
|
|
}
|
|
}
|
|
|
|
public ValueTask DisposeAsync()
|
|
{
|
|
m_bus.Detach(m_received);
|
|
m_received.Writer.TryComplete();
|
|
IsConnected = false;
|
|
return default;
|
|
}
|
|
|
|
private readonly InMemoryBus m_bus;
|
|
private readonly Channel<byte[]> m_received = Channel.CreateUnbounded<byte[]>();
|
|
}
|
|
}
|
|
}
|