mirror of
https://github.com/OPCFoundation/UA-.NETStandard.git
synced 2026-10-19 07:02:16 +08:00
Suciu Mircea Adrian
6ea334a17c
Ignore supplied issuers for the default application group and validate replacements using installed CA certificates. Add regression tests. # Description Certificate renewal could fail when the client omitted the issuer certificate, even though that CA was already installed on the server. Use the server’s configured trust stores and ignore supplied issuers for the default application group. Clients must install CA trust material before renewal; supplied issuers are no longer imported. Existing validation policy and ApplyChanges behavior are preserved. ## Checklist _Put an `x` in the boxes that apply. You can complete these step by step after opening the PR._ - [X] I have signed the [CLA](https://opcfoundation.org/license/cla/ContributorLicenseAgreementv1.0.pdf) and read the [CONTRIBUTING](https://github.com/OPCFoundation/UA-.NETStandard/blob/master/CONTRIBUTING.md) doc. - [X] I have added tests that prove my fix is effective or that my feature works and increased code coverage. - [ ] I have added all necessary documentation. - [ ] I have verified that my changes do not introduce (new) build or analyzer warnings. - [ ] I ran **all** tests locally using the **UA.slnx** solution against at least .net **framework** and .net **10**, and all passed. - [ ] I fixed **all** failing and flaky tests in the CI pipelines and **all** CodeQL warnings. - [ ] I have addressed **all** PR feedback received.