Commit Graph
29 Commits
Author SHA1 Message Date
wenshan1 7bf6a6c590 fix(plugin): Don't store pointer to SecurityPolicy in *_PolicyContext
The pointer to the SecurityPolicy is not stable.
See #3539.
2020-04-07 20:07:48 +02:00
Bin Lan 682a841be5 add the security policy Basic128Rsa15 support with OpenSSL. 2020-03-23 19:54:10 +01:00
Bin Lan 9114e66ef0 add the security policy basic256 support. 2020-03-23 19:54:10 +01:00
Bin Lan 19b3dc0945 add build/test for security policy source code using openssl in Linux. 2020-03-18 10:36:45 +01:00
Bin Lan f71912485e add security policy Basic256Sha256 and PKI support with OpenSSL provider. 2020-03-12 07:43:27 +01:00
Jonas Green 632d490d6d Added copyright notices for HMS Industrial Networks contributions (#3458) 2020-02-25 14:40:07 +01:00
Julius Pfrommer 6a3cc6c8d0 refactor(core): Remove certificate verification from SecurityPolicy in favor of global plugin 2020-01-25 19:33:26 +01:00
Julius Pfrommer 91f6a20c63 Merge branch '1.0' 2019-12-16 21:09:21 +01:00
Mark Giraud 81003a3419 Fix: #3263 Padding is now calculated with the local key size during decryption. 2019-12-11 22:04:24 +01:00
Stefan Profanter a6db9c0a91 feat(mbedtls): Use mbedtls_hardware_poll fallback if MBEDTLS_NO_PLATFORM_ENTROPY defined 2019-11-18 12:55:41 +01:00
Julius Pfrommer 67d3c2c955 fix(plugin): Fix an edge case memleak during policy startup 2019-11-18 10:25:41 +01:00
Martin Lang 56b7c382b1 Update ua_securitypolicy_none.c 2019-10-11 00:53:08 +02:00
Martin Lang 8880d31359 Fix PClint warning variable 'rand' hides function 2019-10-11 00:53:08 +02:00
Julius Pfrommer 5856ceb003 refactor(server): Rename deleteMembers to clear in UA_SecurityPolicy 2019-10-03 15:14:24 +02:00
Stefan Profanter 7d6bb77e33 fix: Security policy check for empty private key to improve error message 2019-08-30 07:26:44 +02:00
Stefan Profanter 960e39fa69 fix: Improve error output for securityContext error 2019-08-30 07:26:44 +02:00
Asish Ganesh 573f0f0852 [FIX] Connect using trusted client certificate
- At present if trusted client certificate having key
   encrypted with sha2-4096 is passed the response
   received is BadCertificateUseNotAllowed
 - According to CTT (Test case 052.js in Security
   Certificate Validation) the expected result is Good
 - Fixed the same by changing the max key length value

Change-Id: Ida9b0fad90ef82b3578e8edee61c43b0653223c3
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
2019-05-26 10:19:52 +02:00
Stefan Profanter ecee9f241e CMake: Correct installation if public headers 2019-03-21 20:16:31 +01:00
Stefan Profanter 63f3653ff1 Additional header cleanup and consistent name of ns generated files 2019-03-21 20:16:31 +01:00
Julius Pfrommer c9c818868f Move header files to a more unix-like structure
This commit drops the 'ua_' prefix and changes the public includes
to the form `#include <open62541/server.h>` instead of the old
`#include <ua_server.h>`
2019-03-21 20:16:31 +01:00
Jannis Voelker 88980e971f Always include security policies in the amalgamated source file
This allows enabling or disabling security at build time when
the amalgamated distribution is used.
2019-03-19 13:29:31 +01:00
Julius Pfrommer 989a081a34 SecurityPolicy: Pull out common code to a separate compilation unit 2019-03-18 16:37:20 +01:00
Julius Pfrommer c9610d83ff SecurityPolicies: Add Basic256 SecurityPolicy 2019-03-18 16:37:20 +01:00
Julius Pfrommer 6c7cc0ab6d SecurityPolicy: Expose reusable methods across SecurityPolicy plugins 2019-03-18 16:37:20 +01:00
Mark Giraud b4d0141e69 Fix #2544 2019-03-10 23:01:14 +01:00
Patrick Gansterer 3866e0c07a Use constant time memcmp to verify signatures to mitigate timing attacks 2019-03-02 08:30:00 +01:00
Mark Giraud 3f314fa917 Fix undefined behavior (null pointers passed to memcpy) 2019-02-01 09:03:45 +01:00
Jonas Green 1a40bb1fe1 WIP: Separate SecurityPolicies from Endpoints in the server (#2247)
* WIP: Separate SecurityPolicies from Endpoints in the server

Currently the SecurityPolicies supported by the server are strongly
tied together with the endpoints. To be able to reuse the
SecurityPolicy instances of the server also in the Access Control
plugin to handle encrypted passwords the SecurityPolicies are moved
to the server config struct.
2019-01-16 22:57:23 +01:00
Mark Giraud 20eccdcaf1 Move plugins to directories for better organisation 2018-12-19 13:09:18 +01:00