mirror of
https://github.com/OPCFoundation/UA-.NETStandard.git
synced 2026-10-17 05:11:13 +08:00
90840b3e48
## Description
The refserver container fails to start with `No OPC UA transport
listener is registered for endpoint scheme 'opc.https'`.
`StandardServer` now validates that every scheme configured in
`BaseAddresses` has a registered transport binding, but
`ConsoleReferenceServer`'s config files
(`Quickstarts.ReferenceServer.Config.xml`,
`Ctt.ReferenceServer.Config.xml`) list `opc.https`/`opc.wss` base
addresses while the sample never registered those bindings on the server
— it relied on the `opc.tcp`-only default.
### Fix
- `UAServer<T>.CreateServerWithTransportBindings()`: shared helper (used
by both `Create()` and `StartAsync()`'s lazy-creation fallback) that
assigns `Server.TransportBindings` before start, so both call sites
can't drift out of sync.
- `CreateTransportBindings()`: builds the registry by reusing the
existing production DI extensions
(`AddOpcUa().AddOpcTcpTransport().AddHttpsTransport().AddWssTransport()`)
via a small `ServiceCollection`, instead of duplicating
factory-registration logic.
### Lifecycle
- The backing `ServiceProvider` is kept alive in `m_transportServices`
for the life of the registry (not disposed immediately after resolving
it, which would invalidate factories relying on DI-owned services) and
is disposed in `StopAsync()` once the server has stopped.
- `CreateTransportBindings()` disposes any stale provider before
building a new one, guarding against repeated `Create()`/`StartAsync()`
calls without an intervening `StopAsync()`.
```csharp
Server = CreateServerWithTransportBindings();
// ...
private ITransportBindingRegistry CreateTransportBindings()
{
m_transportServices?.Dispose();
var services = new ServiceCollection();
services.AddOpcUa().AddOpcTcpTransport().AddHttpsTransport().AddWssTransport();
m_transportServices = services.BuildServiceProvider();
return m_transportServices.GetRequiredService<ITransportBindingRegistry>();
}
```
## Related Issues
## Checklist
- [ ] I have signed the
[CLA](https://opcfoundation.org/license/cla/ContributorLicenseAgreementv1.0.pdf)
and read the
[CONTRIBUTING](https://github.com/OPCFoundation/UA-.NETStandard/blob/master/CONTRIBUTING.md)
doc.
- [ ] I have added tests that prove my fix is effective or that my
feature works and increased code coverage.
- [ ] I have added all necessary documentation.
- [ ] I have verified that my changes do not introduce (new) build or
analyzer warnings.
- [ ] I ran **all** tests locally using the **UA.slnx** solution against
at least .net **framework** and .net **10**, and all passed.
- [ ] I fixed **all** failing and flaky tests in the CI pipelines and
**all** CodeQL warnings.
- [ ] I have addressed **all** PR feedback received.
<!-- START COPILOT CODING AGENT SUFFIX -->
- Fixes #4435
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: romanett <7413710+romanett@users.noreply.github.com>
Co-authored-by: Marc Schier <marcschier@users.noreply.github.com>
500 lines
18 KiB
C#
500 lines
18 KiB
C#
/* ========================================================================
|
|
* Copyright (c) 2005-2025 The OPC Foundation, Inc. All rights reserved.
|
|
*
|
|
* OPC Foundation MIT License 1.00
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person
|
|
* obtaining a copy of this software and associated documentation
|
|
* files (the "Software"), to deal in the Software without
|
|
* restriction, including without limitation the rights to use,
|
|
* copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the
|
|
* Software is furnished to do so, subject to the following
|
|
* conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be
|
|
* included in all copies or substantial portions of the Software.
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
|
|
* OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
|
|
* HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
|
|
* WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
|
|
* OTHER DEALINGS IN THE SOFTWARE.
|
|
*
|
|
* The complete license agreement can be found here:
|
|
* http://opcfoundation.org/License/MIT/1.00/
|
|
* ======================================================================*/
|
|
|
|
using System;
|
|
using System.Collections.Generic;
|
|
using System.IO;
|
|
using System.Linq;
|
|
using System.Text;
|
|
using System.Threading;
|
|
using System.Threading.Tasks;
|
|
using Microsoft.Extensions.DependencyInjection;
|
|
using Microsoft.Extensions.Logging;
|
|
using Opc.Ua;
|
|
using Opc.Ua.Bindings;
|
|
using Opc.Ua.Configuration;
|
|
#if NET10_0_OR_GREATER
|
|
using Opc.Ua.Pcap.Capture;
|
|
#endif
|
|
using Opc.Ua.Security.Certificates;
|
|
using Opc.Ua.Server;
|
|
|
|
namespace Quickstarts
|
|
{
|
|
public class UAServer<T> where T : StandardServer
|
|
{
|
|
public IApplicationInstance Application { get; private set; } = null!;
|
|
|
|
public ApplicationConfiguration Configuration => Application.ApplicationConfiguration!;
|
|
|
|
public bool AutoAccept { get; set; }
|
|
|
|
public char[]? Password { get; set; }
|
|
|
|
public ExitCode ExitCode { get; private set; }
|
|
|
|
public T? Server { get; private set; }
|
|
|
|
/// <summary>
|
|
/// Ctor of the server.
|
|
/// </summary>
|
|
/// <param name="telemetry">The telemetry context.</param>
|
|
public UAServer(ITelemetryContext telemetry, Func<ITelemetryContext, T> factory)
|
|
{
|
|
m_factory = factory;
|
|
m_telemetry = telemetry;
|
|
m_logger = telemetry.CreateLogger<UAServer<T>>();
|
|
}
|
|
|
|
/// <summary>
|
|
/// Load the application configuration.
|
|
/// </summary>
|
|
/// <exception cref="ErrorExitException"></exception>
|
|
public async Task LoadAsync(string applicationName, string configSectionName)
|
|
{
|
|
try
|
|
{
|
|
ExitCode = ExitCode.ErrorNotStarted;
|
|
|
|
ApplicationInstance.MessageDlg = new ApplicationMessageDlg();
|
|
var passwordProvider = new CertificatePasswordProvider(Password);
|
|
Application = new ApplicationInstance(m_telemetry)
|
|
{
|
|
ApplicationName = applicationName,
|
|
ApplicationType = ApplicationType.Server,
|
|
ConfigSectionName = configSectionName,
|
|
CertificatePasswordProvider = passwordProvider
|
|
};
|
|
|
|
// load the application configuration.
|
|
await Application.LoadApplicationConfigurationAsync(false).ConfigureAwait(false);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
throw new ErrorExitException(ex.Message, ExitCode);
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// Load the application configuration.
|
|
/// </summary>
|
|
/// <exception cref="ErrorExitException"></exception>
|
|
public async Task CheckCertificateAsync(bool renewCertificate)
|
|
{
|
|
try
|
|
{
|
|
ApplicationConfiguration config = Application.ApplicationConfiguration!;
|
|
if (renewCertificate)
|
|
{
|
|
await Application.DeleteApplicationInstanceCertificateAsync().ConfigureAwait(false);
|
|
}
|
|
|
|
// check the application certificate.
|
|
bool haveAppCertificate = await Application
|
|
.CheckApplicationInstanceCertificatesAsync(false)
|
|
.ConfigureAwait(false);
|
|
if (!haveAppCertificate)
|
|
{
|
|
throw new ErrorExitException("Application instance certificate invalid!");
|
|
}
|
|
|
|
if (!config.SecurityConfiguration.AutoAcceptUntrustedCertificates)
|
|
{
|
|
config.CertificateManager.AcceptError = AcceptCertificate;
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
throw new ErrorExitException(ex.Message, ExitCode);
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// Create server instance and add node managers.
|
|
/// </summary>
|
|
/// <exception cref="ErrorExitException"></exception>
|
|
public void Create(ArrayOf<INodeManagerFactory> nodeManagerFactories)
|
|
{
|
|
try
|
|
{
|
|
// create the server.
|
|
Server = CreateServerWithTransportBindings();
|
|
foreach (INodeManagerFactory factory in nodeManagerFactories)
|
|
{
|
|
Server.AddNodeManager(factory);
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
throw new ErrorExitException(ex.Message, ExitCode);
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// Creates the server instance and assigns it a transport binding
|
|
/// registry (see <see cref="CreateTransportBindings"/>). Shared by
|
|
/// <see cref="Create"/> and the lazy-creation fallback in
|
|
/// <see cref="StartAsync"/> so both call sites stay in sync.
|
|
/// </summary>
|
|
private T CreateServerWithTransportBindings()
|
|
{
|
|
T server = m_factory(m_telemetry);
|
|
// The reference server configuration files list opc.https / opc.wss
|
|
// base addresses. Register the matching transport bindings (this
|
|
// project references Opc.Ua.Bindings.Https) so those endpoints
|
|
// resolve to a registered listener instead of failing to start.
|
|
server.TransportBindings = CreateTransportBindings();
|
|
return server;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Builds the transport binding registry used by the server. Reuses
|
|
/// the production <c>AddOpcTcpTransport()</c> / <c>AddHttpsTransport()</c> /
|
|
/// <c>AddWssTransport()</c> DI registrations (this project references
|
|
/// <c>Opc.Ua.Bindings.Https</c>) so base addresses configured with the
|
|
/// <c>opc.tcp</c>/<c>opc.https</c>/<c>https</c>/<c>opc.wss</c>/<c>wss</c>
|
|
/// schemes resolve to a registered transport instead of relying on a
|
|
/// hand-rolled duplicate of that registration logic. The backing
|
|
/// <see cref="ServiceProvider"/> is kept alive in <see cref="m_transportServices"/>
|
|
/// for as long as the registry is in use and disposed in <see cref="StopAsync"/>.
|
|
/// </summary>
|
|
private ITransportBindingRegistry CreateTransportBindings()
|
|
{
|
|
// Guard against leaking a previously built provider if Create()/StartAsync()
|
|
// are invoked again without an intervening StopAsync().
|
|
m_transportServices?.Dispose();
|
|
|
|
var services = new ServiceCollection();
|
|
services.AddOpcUa()
|
|
.AddOpcTcpTransport()
|
|
.AddHttpsTransport()
|
|
.AddWssTransport();
|
|
m_transportServices = services.BuildServiceProvider();
|
|
return m_transportServices.GetRequiredService<ITransportBindingRegistry>();
|
|
}
|
|
|
|
/// <summary>
|
|
/// Start the server.
|
|
/// </summary>
|
|
/// <exception cref="ErrorExitException"></exception>
|
|
public async Task StartAsync(CancellationToken ct = default)
|
|
{
|
|
try
|
|
{
|
|
// create the server.
|
|
Server ??= CreateServerWithTransportBindings();
|
|
|
|
#if NET10_0_OR_GREATER
|
|
// Opt-in diagnostics: when OPCUA_PCAP_FILE / OPCUA_KEYLOGFILE are
|
|
// set, install server-side pcap capture into the transport
|
|
// bindings before the listeners open. Mirrors the client env-var
|
|
// path and honours the same variables; a complete no-op (nothing
|
|
// installed, no files written) when the variables are unset.
|
|
// The pcap capture package targets net8.0+ only.
|
|
m_pcapCapture = await PcapServerCapture.TryStartFromEnvironmentAsync(
|
|
Server!.TransportBindings,
|
|
m_telemetry.LoggerFactory,
|
|
ct).ConfigureAwait(false);
|
|
#endif
|
|
|
|
// start the server
|
|
await Application.StartAsync(Server, ct).ConfigureAwait(false);
|
|
|
|
// save state
|
|
ExitCode = ExitCode.ErrorRunning;
|
|
|
|
// print endpoint info
|
|
foreach (string? endpoint in Application.Server!
|
|
.GetEndpoints()
|
|
.ConvertAll(e => e.EndpointUrl)
|
|
.ToList()
|
|
.Distinct())
|
|
{
|
|
Console.WriteLine(endpoint);
|
|
}
|
|
|
|
// start the status thread
|
|
m_status = Task.Run(StatusThreadAsync, default);
|
|
|
|
// print notification on session events
|
|
Server.CurrentInstance.SessionManager.SessionActivated += EventStatus;
|
|
Server.CurrentInstance.SessionManager.SessionClosing += EventStatus;
|
|
Server.CurrentInstance.SessionManager.SessionCreated += EventStatus;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
try
|
|
{
|
|
await DisposeTransportBindingsAsync().ConfigureAwait(false);
|
|
}
|
|
catch (Exception cleanupException)
|
|
{
|
|
throw new ErrorExitException(ex.Message, cleanupException, ExitCode);
|
|
}
|
|
|
|
throw new ErrorExitException(ex.Message, ExitCode);
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// Stops the server.
|
|
/// </summary>
|
|
/// <exception cref="ErrorExitException"></exception>
|
|
public async Task StopAsync(CancellationToken ct = default)
|
|
{
|
|
try
|
|
{
|
|
if (Server != null)
|
|
{
|
|
using T server = Server;
|
|
// Stop status thread which monitores the server property.
|
|
Server = null;
|
|
await m_status.ConfigureAwait(false);
|
|
|
|
// Stop server and dispose
|
|
await server.StopAsync(ct).ConfigureAwait(false);
|
|
}
|
|
|
|
ExitCode = ExitCode.Ok;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
throw new ErrorExitException(ex.Message, ExitCode.ErrorStopping);
|
|
}
|
|
finally
|
|
{
|
|
await DisposeTransportBindingsAsync().ConfigureAwait(false);
|
|
}
|
|
}
|
|
|
|
private async Task DisposeTransportBindingsAsync()
|
|
{
|
|
#if NET10_0_OR_GREATER
|
|
try
|
|
{
|
|
if (m_pcapCapture != null)
|
|
{
|
|
await m_pcapCapture.DisposeAsync().ConfigureAwait(false);
|
|
m_pcapCapture = null;
|
|
}
|
|
}
|
|
finally
|
|
#endif
|
|
{
|
|
m_transportServices?.Dispose();
|
|
m_transportServices = null;
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// Per-error accept callback used when AutoAcceptUntrustedCertificates is false.
|
|
/// </summary>
|
|
private bool AcceptCertificate(Certificate certificate, ServiceResult error)
|
|
{
|
|
if (error.StatusCode == StatusCodes.BadCertificateUntrusted && AutoAccept)
|
|
{
|
|
m_logger.AcceptedCertificate(
|
|
certificate.Subject,
|
|
certificate.Thumbprint);
|
|
return true;
|
|
}
|
|
m_logger.RejectedCertificate(
|
|
error,
|
|
certificate.Subject,
|
|
certificate.Thumbprint);
|
|
return false;
|
|
}
|
|
|
|
/// <summary>
|
|
/// Update the session status.
|
|
/// </summary>
|
|
private void EventStatus(ISession session, SessionEventReason reason)
|
|
{
|
|
m_lastEventTime = DateTime.UtcNow;
|
|
LogSessionStatusFull(session, reason.ToString());
|
|
}
|
|
|
|
/// <summary>
|
|
/// Output the status of a connected session.
|
|
/// </summary>
|
|
private void LogSessionStatusLastContact(ISession session, string reason)
|
|
{
|
|
if (!m_logger.IsEnabled(LogLevel.Information))
|
|
{
|
|
return;
|
|
}
|
|
|
|
// Snapshot the fields under the session's lock, then log outside it.
|
|
(string? name, DateTime lastContact) = session.ReadDiagnostics(
|
|
diagnostics => (
|
|
diagnostics.SessionName,
|
|
(DateTime)diagnostics.ClientLastContactTime));
|
|
|
|
m_logger.SessionStatusLastContact(reason, name, lastContact.ToLocalTime());
|
|
}
|
|
|
|
/// <summary>
|
|
/// Output the status of a connected session.
|
|
/// </summary>
|
|
private void LogSessionStatusFull(ISession session, string reason)
|
|
{
|
|
if (!m_logger.IsEnabled(LogLevel.Information))
|
|
{
|
|
return;
|
|
}
|
|
|
|
(string? name, DateTime lastContact) = session.ReadDiagnostics(
|
|
diagnostics => (
|
|
diagnostics.SessionName,
|
|
(DateTime)diagnostics.ClientLastContactTime));
|
|
|
|
m_logger.SessionStatusFull(
|
|
reason,
|
|
name,
|
|
lastContact.ToLocalTime(),
|
|
session.Identity?.DisplayName ?? "Anonymous",
|
|
session.Id);
|
|
}
|
|
|
|
/// <summary>
|
|
/// Status thread, prints connection status every 10 seconds.
|
|
/// </summary>
|
|
private async Task StatusThreadAsync()
|
|
{
|
|
while (Server != null)
|
|
{
|
|
if (DateTime.UtcNow - m_lastEventTime > TimeSpan.FromMilliseconds(10000))
|
|
{
|
|
IList<ISession> sessions = Server.CurrentInstance.SessionManager.GetSessions();
|
|
for (int ii = 0; ii < sessions.Count; ii++)
|
|
{
|
|
ISession session = sessions[ii];
|
|
LogSessionStatusLastContact(session, "-Status-");
|
|
}
|
|
m_lastEventTime = DateTime.UtcNow;
|
|
}
|
|
await Task.Delay(1000).ConfigureAwait(false);
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// A dialog which asks for user input.
|
|
/// </summary>
|
|
public class ApplicationMessageDlg : IApplicationMessageDlg
|
|
{
|
|
private readonly TextWriter m_output;
|
|
private string m_message = string.Empty;
|
|
private bool m_ask;
|
|
|
|
public ApplicationMessageDlg(TextWriter? output = null)
|
|
{
|
|
m_output = output ?? Console.Out;
|
|
}
|
|
|
|
public override void Message(string text, bool ask)
|
|
{
|
|
m_message = text;
|
|
m_ask = ask;
|
|
}
|
|
|
|
public override async Task<bool> ShowAsync()
|
|
{
|
|
if (m_ask)
|
|
{
|
|
var message = new StringBuilder(m_message);
|
|
message.Append(" (y/n, default y): ");
|
|
m_output.Write(message.ToString());
|
|
|
|
try
|
|
{
|
|
ConsoleKeyInfo result = Console.ReadKey();
|
|
m_output.WriteLine();
|
|
return await Task.FromResult(result.KeyChar is 'y' or 'Y' or '\r')
|
|
.ConfigureAwait(false);
|
|
}
|
|
catch
|
|
{
|
|
// intentionally fall through
|
|
}
|
|
}
|
|
else
|
|
{
|
|
m_output.WriteLine(m_message);
|
|
}
|
|
|
|
return await Task.FromResult(true).ConfigureAwait(false);
|
|
}
|
|
}
|
|
|
|
private readonly Func<ITelemetryContext, T> m_factory;
|
|
private readonly ITelemetryContext m_telemetry;
|
|
private readonly ILogger m_logger;
|
|
private Task m_status = Task.CompletedTask;
|
|
private DateTime m_lastEventTime;
|
|
private ServiceProvider? m_transportServices;
|
|
#if NET10_0_OR_GREATER
|
|
private IAsyncDisposable? m_pcapCapture;
|
|
#endif
|
|
}
|
|
|
|
internal static partial class UAServerLog
|
|
{
|
|
[LoggerMessage(EventId = ConsoleReferenceServerEventIds.UAServer + 0, Level = LogLevel.Information,
|
|
Message = "Accepted Certificate: [{Subject}] [{Thumbprint}]")]
|
|
public static partial void AcceptedCertificate(this ILogger logger, string subject, string thumbprint);
|
|
|
|
[LoggerMessage(EventId = ConsoleReferenceServerEventIds.UAServer + 1, Level = LogLevel.Information,
|
|
Message = "Rejected Certificate: {Error} [{Subject}] [{Thumbprint}]")]
|
|
public static partial void RejectedCertificate(
|
|
this ILogger logger,
|
|
ServiceResult error,
|
|
string subject,
|
|
string thumbprint);
|
|
|
|
[LoggerMessage(EventId = ConsoleReferenceServerEventIds.UAServer + 2, Level = LogLevel.Information,
|
|
Message = "{Reason,9}:{Session,20}:Last Event:{LastContactTime:HH:mm:ss}")]
|
|
public static partial void SessionStatusLastContact(
|
|
this ILogger logger,
|
|
string reason,
|
|
string? session,
|
|
DateTime lastContactTime);
|
|
|
|
[LoggerMessage(EventId = ConsoleReferenceServerEventIds.UAServer + 3, Level = LogLevel.Information,
|
|
Message = "{Reason,9}:{Session,20}:Last Event:{LastContactTime:HH:mm:ss}:{UserIdentity,20}:{SessionId}")]
|
|
public static partial void SessionStatusFull(
|
|
this ILogger logger,
|
|
string reason,
|
|
string? session,
|
|
DateTime lastContactTime,
|
|
string userIdentity,
|
|
NodeId sessionId);
|
|
}
|
|
|
|
}
|