wenshan1
7bf6a6c590
fix(plugin): Don't store pointer to SecurityPolicy in *_PolicyContext
...
The pointer to the SecurityPolicy is not stable.
See #3539 .
2020-04-07 20:07:48 +02:00
Bin Lan
682a841be5
add the security policy Basic128Rsa15 support with OpenSSL.
2020-03-23 19:54:10 +01:00
Bin Lan
9114e66ef0
add the security policy basic256 support.
2020-03-23 19:54:10 +01:00
Bin Lan
19b3dc0945
add build/test for security policy source code using openssl in Linux.
2020-03-18 10:36:45 +01:00
Bin Lan
f71912485e
add security policy Basic256Sha256 and PKI support with OpenSSL provider.
2020-03-12 07:43:27 +01:00
Jonas Green
632d490d6d
Added copyright notices for HMS Industrial Networks contributions ( #3458 )
2020-02-25 14:40:07 +01:00
Julius Pfrommer
6a3cc6c8d0
refactor(core): Remove certificate verification from SecurityPolicy in favor of global plugin
2020-01-25 19:33:26 +01:00
Julius Pfrommer
91f6a20c63
Merge branch '1.0'
2019-12-16 21:09:21 +01:00
Mark Giraud
81003a3419
Fix : #3263 Padding is now calculated with the local key size during decryption.
2019-12-11 22:04:24 +01:00
Stefan Profanter
a6db9c0a91
feat(mbedtls): Use mbedtls_hardware_poll fallback if MBEDTLS_NO_PLATFORM_ENTROPY defined
2019-11-18 12:55:41 +01:00
Julius Pfrommer
67d3c2c955
fix(plugin): Fix an edge case memleak during policy startup
2019-11-18 10:25:41 +01:00
Martin Lang
56b7c382b1
Update ua_securitypolicy_none.c
2019-10-11 00:53:08 +02:00
Martin Lang
8880d31359
Fix PClint warning variable 'rand' hides function
2019-10-11 00:53:08 +02:00
Julius Pfrommer
5856ceb003
refactor(server): Rename deleteMembers to clear in UA_SecurityPolicy
2019-10-03 15:14:24 +02:00
Stefan Profanter
7d6bb77e33
fix: Security policy check for empty private key to improve error message
2019-08-30 07:26:44 +02:00
Stefan Profanter
960e39fa69
fix: Improve error output for securityContext error
2019-08-30 07:26:44 +02:00
Asish Ganesh
573f0f0852
[FIX] Connect using trusted client certificate
...
- At present if trusted client certificate having key
encrypted with sha2-4096 is passed the response
received is BadCertificateUseNotAllowed
- According to CTT (Test case 052.js in Security
Certificate Validation) the expected result is Good
- Fixed the same by changing the max key length value
Change-Id: Ida9b0fad90ef82b3578e8edee61c43b0653223c3
Signed-off-by: Asish Ganesh <asish.g@kalycito.com >
2019-05-26 10:19:52 +02:00
Stefan Profanter
ecee9f241e
CMake: Correct installation if public headers
2019-03-21 20:16:31 +01:00
Stefan Profanter
63f3653ff1
Additional header cleanup and consistent name of ns generated files
2019-03-21 20:16:31 +01:00
Julius Pfrommer
c9c818868f
Move header files to a more unix-like structure
...
This commit drops the 'ua_' prefix and changes the public includes
to the form `#include <open62541/server.h>` instead of the old
`#include <ua_server.h>`
2019-03-21 20:16:31 +01:00
Jannis Voelker
88980e971f
Always include security policies in the amalgamated source file
...
This allows enabling or disabling security at build time when
the amalgamated distribution is used.
2019-03-19 13:29:31 +01:00
Julius Pfrommer
989a081a34
SecurityPolicy: Pull out common code to a separate compilation unit
2019-03-18 16:37:20 +01:00
Julius Pfrommer
c9610d83ff
SecurityPolicies: Add Basic256 SecurityPolicy
2019-03-18 16:37:20 +01:00
Julius Pfrommer
6c7cc0ab6d
SecurityPolicy: Expose reusable methods across SecurityPolicy plugins
2019-03-18 16:37:20 +01:00
Mark Giraud
b4d0141e69
Fix #2544
2019-03-10 23:01:14 +01:00
Patrick Gansterer
3866e0c07a
Use constant time memcmp to verify signatures to mitigate timing attacks
2019-03-02 08:30:00 +01:00
Mark Giraud
3f314fa917
Fix undefined behavior (null pointers passed to memcpy)
2019-02-01 09:03:45 +01:00
Jonas Green
1a40bb1fe1
WIP: Separate SecurityPolicies from Endpoints in the server ( #2247 )
...
* WIP: Separate SecurityPolicies from Endpoints in the server
Currently the SecurityPolicies supported by the server are strongly
tied together with the endpoints. To be able to reuse the
SecurityPolicy instances of the server also in the Access Control
plugin to handle encrypted passwords the SecurityPolicies are moved
to the server config struct.
2019-01-16 22:57:23 +01:00
Mark Giraud
20eccdcaf1
Move plugins to directories for better organisation
2018-12-19 13:09:18 +01:00