Commit Graph
17 Commits
Author SHA1 Message Date
Bin Lan f71912485e add security policy Basic256Sha256 and PKI support with OpenSSL provider. 2020-03-12 07:43:27 +01:00
Julius Pfrommer 412fd83b5d feat(plugin): Accept all certificates if the pki plugin is unconfigured
* But *do warn*
2020-01-25 19:33:26 +01:00
Julius Pfrommer 7f138de1c4 fix(plugin): Remove trailing newline from mbedtls error message 2020-01-25 19:33:26 +01:00
Julius Pfrommer 6a1c300e82 feat(plugin): More logging in ua_pki_default.c 2020-01-18 21:15:08 +01:00
Stefan Profanter a9dbfff1c0 fix(mbedtls): Initialize variables to mute maybe-uninitialized warning 2019-11-18 12:55:41 +01:00
Julius Pfrommer 679317c7c6 fix(server): Fix a warning in plugins/ua_pki_default.c 2019-10-30 14:07:57 +01:00
Julius Pfrommer 8bea4e4363 refactor(core): Replace deleteMembers with clear in UA_CertificateVerification 2019-10-03 15:14:24 +02:00
Stefan Profanter 2aa85fd9d7 fix: Fix clang compiler warnings on windows (found by azure build) 2019-08-30 15:48:44 +02:00
Julius Pfrommer 6f79ec6e8f Server: Reload folders with certificates during runtime 2019-08-08 09:59:15 +02:00
Julius Pfrommer c043775cd0 PKI: Correctly free the issuer list 2019-08-08 09:59:15 +02:00
Asish Ganesh 21e32dd997 [TASK] Check if a trusted certificate has a CRL file
- If there is no CRL file available for the corresponding parent
   certificate then return status code
   UA_STATUSCODE_BADCERTIFICATEREVOCATIONUNKNOWN
 - This resolves 042.js and 043.js test case in Security Certificate
   Validation Conformance Unit

Change-Id: I9fda40356d7d271b3f6ffeefb31b7cda569ee873
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
2019-07-05 14:10:17 +02:00
Asish Ganesh d31a8126f2 [TASK] Check if a not trusted certificate has a CRL file
- Add functionality to identify the topmost parent certificate
   of a remoteCertificate
 - Check if any CRL file in the revocationList corresponds to
   the parent certificate
 - If there is no CRL file available for the corresponding parent
   certificate then return status code
   UA_STATUSCODE_BADCERTIFICATEISSUERREVOCATIONUNKNOWN
 - This resolves 002.js test case in Security Certificate
   Validation Conformance Unit

Change-Id: I1ac966973535042938add068c152796d65ee3b6e
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
2019-07-05 14:10:17 +02:00
Asish Ganesh 436f29b03a [TASK] Pass issuer list separately
- At present issuer list is passed in trust list
 - Add functionality to pass the issuer list separately
 - Handle condition where a client is connected using
   an (trusted) issued certificate of a CA that is not
   trusted but available
 - This resolves test case number 044.js and 045.js in
   Security Certificate Validation to pass simultaneously
 - usage : ./server_ctt <server-certificate.der> <private-key.der>
           [--trustlist <tl1.ctl> <tl2.ctl> ... ]
           [--issuerlist <il1.der> <il2.der> ... ]
           [--revocationlist <rv1.crl> <rv2.crl> ...]

Change-Id: I4a25af9f4c2b771da9492fafb534f72dcc6fc17d
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
2019-07-05 14:10:17 +02:00
Asish Ganesh d85d929592 [FIX] Security certificate validation for CA certificate
- Check if the certificate used to establish connection is
   CA or User certificate
 - This fix resolves Security/Security Certificate Validation/029.js

Change-Id: I9e7d1e3ba43c13e4eec830368da4a94b0ce7aaf7
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
2019-05-23 11:11:57 +02:00
Mark Giraud d070a2ff51 Clean up implementation specific behavior and some other code smells 2019-03-22 19:33:15 +00:00
Stefan Profanter 63f3653ff1 Additional header cleanup and consistent name of ns generated files 2019-03-21 20:16:31 +01:00
Julius Pfrommer c9c818868f Move header files to a more unix-like structure
This commit drops the 'ua_' prefix and changes the public includes
to the form `#include <open62541/server.h>` instead of the old
`#include <ua_server.h>`
2019-03-21 20:16:31 +01:00