Commit Graph
24 Commits
Author SHA1 Message Date
Jayanth Velusamy a963a81e76 refactor(sec): option to provide certificate name
- Add "-c" option for certificate naming

Signed-off-by: Jayanth Velusamy <jayanth.v@kalycito.com>
2020-02-07 14:36:17 +01:00
Julius Pfrommer 5065bb1159 fix(tools): Make the ApplicationUri in the certificate configurable 2019-11-13 23:19:28 +01:00
Julius Pfrommer 89145733bf refactor(tools): Use argparse for the certificate creation script 2019-11-13 23:19:28 +01:00
Jayanth Velusamy 89ada3563f [CTT] Multiple fixes
Signed-off-by: Jayanth Velusamy <jayanth.v@kalycito.com>
2019-07-24 07:13:27 +02:00
Asish Ganesh 19637d6dba [FIX] Remove localhost from hostname in server certificate
- Currently generated server certificate (server_cert.der) has
   hostname set to localhost and IP Address set to 127.0.0.1
 - In new CTT, using "localhost" as hostname in a certificate or
   EndpointUrl is not allowed
 - So modified Python script and the corresponding configuration
   file (localhost.cnf) to dynamically identify the network
   interfaces and the corresponding IP addresses
 - If there is only one interface available set the second IP
   address as 127.0.0.1

Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
2019-04-25 00:24:34 +02:00
Stefan Profanter 81148ab1eb Fix various python code quality issues
See also https://lgtm.com/projects/g/open62541/open62541/alerts
2018-11-28 16:12:12 +01:00
ckmk14 d438c438cb Create self-signed ApplicationInstanceCertificate (#1865)
* Create self-signed ApplicationInstanceCertificate

* Comments removed and changes to CMakeList
2018-06-22 23:13:50 +02:00
Markus Kocybik e8bea685ac Adds dataEncipherment to key usage extension for initial certificate 2018-06-14 20:48:47 +02:00
Sharavanan A R 6d7f08b641 [FIX] Trust list verification for secure client application
- Update UA_ByteString_allocBuffer() to UA_STACKARRAY() in the files
   examples/encryption/client_basic128rsa15.c and examples/encryption/
   client_basic256sha256.c.
 - Handle return value for remote certificate verification in
   ua_client.c file.
 - Update create_self-signed.py to generate CA certificate in .der
   format.

Change-Id: I6e84694c99c561d237ecbafb63b957d19c2e74c9
Signed-off-by: Sharavanan A R <sharavanan.ar@kalycito.com>
2018-04-16 10:44:33 +02:00
Mark Giraud 2110c8892e Fix windows script and warning (#1558) 2018-01-30 15:43:46 +01:00
Julius Pfrommer c457c43c2d create private key for server with the certificate
make a 1024 bit certificate by default (128bit)

revert to 2048bit keys

Change certificate generation script

The key length can now be supplied as a command line argument and the file names should better reflect the files purposes.
2018-01-17 15:05:00 +01:00
Julius Pfrommer c4c2c6f316 set executable bit on python scripts 2018-01-06 10:40:42 +01:00
tbeu 983f956003 Fix typos 2017-12-13 09:15:49 +01:00
FlorianPalm 810db94bca added MPL v2 license to c/h/py files 2017-02-12 08:07:27 +01:00
Sten Grüner 4b816c0b36 Certificate (#709)
* reviving server's certificates in an example

* adding a forgotten new example

* trying selfsigned on appveyor

* adding server to global server.c and the script

* path fix

* msvs fopen deprication warning disabled

* one more path fix

* one more msvs fix

* more defines for msvs warnings

* one more try

* Aux output for cert generator

* adding certificates to artifacts
2016-07-18 23:40:48 +02:00
Sten Grüner 966a7a255d reviving server's certificates in an example (#708)
* reviving server's certificates in an example

* adding a forgotten new example

* trying selfsigned on appveyor

* adding server to global server.c and the script

* path fix

* msvs fopen deprication warning disabled

* one more path fix

* one more msvs fix

* more defines for msvs warnings

* one more try
2016-07-18 23:21:14 +02:00
Stasik0 6af73e48f4 renaming server certificate to "server_cert.der", adding a self signed certificate to release, should work out, at least for CTT 2015-05-08 15:12:09 +02:00
Stasik0 998af668ed improving ENABLE_SELFSIGNED - cmake fill check for openssl now 2015-05-03 10:13:52 +02:00
Julius Pfrommer c451b5db7c enable certificate generation on windows
(cherry picked from commit 9a85b7dcb4)
2015-04-25 22:44:36 +02:00
Stasik0 113f945fbf addung discoveryUrl to the NetworkLayer interface, changed everything not to use static ips and ports, but hostname of the system 2015-03-20 11:58:12 +01:00
Stasik0 8d0f79a9b4 fixing discoveryUrls 2015-03-19 15:06:43 +01:00
Stasik0 bd779b4010 adding server uri to further nodes 2015-03-14 19:46:34 +01:00
Stasik0 d719c82936 fixing application url to match certificate 2015-03-14 15:54:44 +01:00
Stasik0 44971d3fad reworked certificate generation, UaExpert still misses revocatio lists etc, but creating a full CA will be to complex ATM 2014-09-10 11:52:54 +02:00