1. generateChildNodeId: Used to define NodeIds for automatically generated nodes during recursive node instantiation
2. createOptionalChild: Used to define whether an optional child should be created during recursive node instantiation
- If there is no CRL file available for the corresponding parent
certificate then return status code
UA_STATUSCODE_BADCERTIFICATEREVOCATIONUNKNOWN
- This resolves 042.js and 043.js test case in Security Certificate
Validation Conformance Unit
Change-Id: I9fda40356d7d271b3f6ffeefb31b7cda569ee873
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
- Add functionality to identify the topmost parent certificate
of a remoteCertificate
- Check if any CRL file in the revocationList corresponds to
the parent certificate
- If there is no CRL file available for the corresponding parent
certificate then return status code
UA_STATUSCODE_BADCERTIFICATEISSUERREVOCATIONUNKNOWN
- This resolves 002.js test case in Security Certificate
Validation Conformance Unit
Change-Id: I1ac966973535042938add068c152796d65ee3b6e
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
- At present issuer list is passed in trust list
- Add functionality to pass the issuer list separately
- Handle condition where a client is connected using
an (trusted) issued certificate of a CA that is not
trusted but available
- This resolves test case number 044.js and 045.js in
Security Certificate Validation to pass simultaneously
- usage : ./server_ctt <server-certificate.der> <private-key.der>
[--trustlist <tl1.ctl> <tl2.ctl> ... ]
[--issuerlist <il1.der> <il2.der> ... ]
[--revocationlist <rv1.crl> <rv2.crl> ...]
Change-Id: I4a25af9f4c2b771da9492fafb534f72dcc6fc17d
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
- At present if trusted client certificate having key
encrypted with sha2-4096 is passed the response
received is BadCertificateUseNotAllowed
- According to CTT (Test case 052.js in Security
Certificate Validation) the expected result is Good
- Fixed the same by changing the max key length value
Change-Id: Ida9b0fad90ef82b3578e8edee61c43b0653223c3
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
- Check if the certificate used to establish connection is
CA or User certificate
- This fix resolves Security/Security Certificate Validation/029.js
Change-Id: I9e7d1e3ba43c13e4eec830368da4a94b0ce7aaf7
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
- Currently security level value not initialized corresponding to
the message security mode
- In CTT, "Security Certificate Validation" test cases gets skipped
since security level value is zero for all security modes
- So modified the security level value corresponding to the message
security mode
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
This commit drops the 'ua_' prefix and changes the public includes
to the form `#include <open62541/server.h>` instead of the old
`#include <ua_server.h>`
The Micro Embedded UA profile allow devices to not support the
retransmission queue implemented by the session when DataChange
Subscriptions are supported. Previously there has been no possibility
to disable this queue. Disabling this queue can save some memory on
a resource constrained device.
Change-Id: I4e324b41f85bffdd0e640fb173f82c121a2044b5
Mark Giraud