Commit Graph
241 Commits
Author SHA1 Message Date
Noel Graf 5bd7ceb46d feat(arch): Add lwip udp support 2025-03-19 08:31:35 +01:00
Noel Graf 057b8adcf7 feat(server): Add a configuration field to specify whether the interface should be initialized by the stack or if it has already been initialized externally 2025-03-19 08:31:35 +01:00
Noel Graf 418ded28bd feat(arch): Add tcp connection manager for lwip 2025-03-19 08:31:35 +01:00
Julius Pfrommer 3bec159cb9 Merge remote-tracking branch 'origin/1.4' into merge_14_master_25 2025-01-25 19:06:56 +01:00
tomitkl 2076a9c87f feat(plugin): Add filestore Windows implementation (#7006)
* feat(plugin): Add filestore Windows implementation

* Define UA_DT_REG and UA_DT_DIR

* Remove build flag and use __linux__ or UA_ARCHITECTURE_WIN32 in places which used to check only for __linux__
2025-01-10 14:28:37 +01:00
Noel Graf 34d957c561 fix(server): Consistency in the use of the Windows architecture flag 2025-01-09 15:00:38 +01:00
Vasilij Strassheim a8930fd50a refactor(server): Clean up mDNS module
Separate mDNS related code from discovery module to enable easier integration
of different mDNS implementations. Add new API functions and make other functions
static to reflect their use in the mDNS module only.
The libmdnsd implementation uses an ip entry for the server and selects the
interface to be used for establishing the connection. This is not required for
avahi as the avahi daemon is normally configured externally. Make the server
configuration of the mDNS IP list and the interface dependent on the use of
libmdnsd.

Signed-off-by: Vasilij Strassheim <vasilij.strassheim@linutronix.de>
2025-01-01 11:57:50 +01:00
Rolf Kalbermatter e391342741 improve(eventloop): make conditional macros more clear for the Ehernet ConnectionManager which is only implemented on Linux 2024-12-23 00:22:27 +01:00
Julius Pfrommer 9ae8b76986 refactor(plugins): Use urn:open62541.unconfigured.application as the default ApplicationUri
We want to have the same default for client and server. So we get less
trouble with reusing certificates. Before we had to manually adjust the
client URI to say "server". That's not good...
2024-12-10 08:28:30 +01:00
Rolf Kalbermatter 3636fef49a fix(eventloop): only attempt to call the UA_ConnectionManager_new_POSIX_Ethernet() function when compiling for Linux as it will be only generated for that. Issue #6883 2024-11-21 13:11:14 +01:00
Noel Graf dcc918bec8 fix(server): Improved error logging when using the filestore backend. Fixed incorrect behaviour 2024-11-14 19:41:29 +01:00
Thomas Zeschg 308d8e2759 feat(plugin): add OpenSSL plugin for ECC P-256
Add http://opcfoundation.org/UA/SecurityPolicy#ECC_nistP256
policy support in OpenSSL plugin.
2024-11-04 12:44:46 +01:00
Julian Weiß 3fc0a11d1d feat(plugins): Add Zephyr support to the default server/client configuration 2024-10-25 15:35:07 +02:00
Julius Pfrommer ff24a547d4 Merge remote-tracking branch 'origin/1.4' into merge_14_master_22 2024-10-07 22:23:25 +02:00
Julius Pfrommer 0feab11c3f refactor(plugin): Set the AuthenticationSecurityPolicies by default 2024-10-05 22:27:09 +02:00
Julius Pfrommer b540d89147 fix(plugins): Don't enable Basic128Rsa15 and Basic256 SecurityPolicies by default for authentication 2024-10-05 22:11:23 +02:00
Julius Pfrommer 712cce9bb7 Merge remote-tracking branch 'origin/1.3' into merge_13_14_19 2024-10-05 22:11:22 +02:00
Julius Pfrommer 0a48591990 fix(plugins): Disable the Basic128Rsa15 and Basic256 SecurityPolicy 2024-10-03 13:47:11 +02:00
Julius Pfrommer 43e2b04a26 Merge remote-tracking branch 'origin/1.4' into merge_14_master_22 2024-10-03 10:33:56 +02:00
Julius Pfrommer 2008fc2676 Merge remote-tracking branch 'origin/1.3' into merge_13_14_17 2024-09-27 22:35:01 +02:00
Julius Pfrommer ee79096b65 fix(plugin): Always clean up the previously configured certificate verification plugin 2024-09-22 23:49:24 +02:00
Julius Pfrommer 2368ec2cbe Merge remote-tracking branch 'origin/1.4' into merge_14_master_21 2024-09-11 15:33:39 +02:00
Julius Pfrommer 68e7dbcfad refactor(plugins): Enable PubSub by default if it is compiled in 2024-09-09 23:20:32 +02:00
Florian La Roche ebe5e4260a fix(core): increase maxSecureChannels to 100, fix check for enough channels
Increase maxSecureChannels to 100 and change the check for enough
SecureChannels to not give a warning if maxSessions==maxSecureChannels.

Signed-off-by: Florian La Roche <Florian.LaRoche@gmail.com>
2024-09-04 11:41:36 +02:00
Julius Pfrommer 1f8e9f04fa Merge remote-tracking branch 'origin/1.4' into merge_14_master_18 2024-07-27 11:07:53 +02:00
Noel Graf 48e08399cd fix(server): Allow dynamic port assignment 2024-07-24 12:18:17 +02:00
Noel GrafandJulius Pfrommer 5fa1cf643e feat(plugin): Adding filestore backend security policies (#6564)
* feat(plugin): Add filestore backend security policies to support writing updated certificates back to the file system

* feat(tests): Add test cases for the filestore security policies and the updateCertificate function

---------

Co-authored-by: Julius Pfrommer <jpfr@users.noreply.github.com>
2024-07-23 14:41:48 +02:00
Julius Pfrommer 33327a85a9 Merge remote-tracking branch 'origin/1.4' into merge_14_master_17 2024-07-08 10:56:48 +02:00
Julius Pfrommer d463871863 Merge branch 'publish_pubsub_rt' into merge_14_master_16 2024-06-25 15:53:04 +02:00
Florian La Roche bde1b79cc5 refactor(plugins): Adjust default network buffer sizes (#6552)
Some items use 2<<y instead of 1<<y==2^y.
I've kept the buffer size in ua_pki_mbedtls.c the same,
though this could also get reduced.

Signed-off-by: Florian La Roche <Florian.LaRoche@gmail.com>
2024-06-19 08:09:08 +02:00
Noel Graf 3d0da9ad73 fix(server): Set the trust list configuration parameters in the server configuration default function 2024-06-10 15:27:40 +02:00
Julius Pfrommer 11c1a554e5 refactor(plugins): Make TCP port reuse the default 2024-06-05 07:24:40 +02:00
Julius Pfrommer c18a46294a refactor(build): Remove UA_PACK_DEBIAN - use the tools/prepare_packaging script instead 2024-06-04 20:45:24 +02:00
Noel Graf 1506055b30 feat(server): Make the maximum number of certificates in the trust list and rejected list configurable 2024-06-04 11:43:31 +02:00
Noel Graf c84a5cb620 feat(server): Added a function to configure the server with a filestore backend 2024-06-04 11:43:31 +02:00
Noel Graf 0bb4c96113 feat(server): Use of the memory store backend as default when creating a server configuration 2024-05-10 21:39:17 +02:00
RolfKal 97ab4e1989 fix(server): Rename UA_ServerConfig_clean() to UA_SeverConfig_clear() to be consistent with the functions used for the types 2024-04-30 11:00:21 +02:00
Julius Pfrommer 0cf5e46b75 Merge remote-tracking branch 'origin/1.4' into merge_14_master_16 2024-03-18 16:08:22 +01:00
Noel Graf 3bc62f7812 fix(server): The reuseaddr socket option is now disabled by default. Server does not start if Binary Protocol Manager fails to start. 2024-03-15 10:42:06 +01:00
Julius Pfrommer 5fd73b909a Merge remote-tracking branch 'origin/1.4' into merge_14_master_15 2024-03-15 09:28:23 +01:00
Julius Pfrommer 131a8f6c1f refactor(plugin): Heap-allocate the log plugin by default 2024-03-03 23:47:06 +01:00
Noel Graf 579d51f75b feat(server): Define the CertificateGroup interface and enable gds push management capabilities in the server information model. 2024-02-23 11:37:52 +01:00
Julius Pfrommer 7b9f71dce5 Merge remote-tracking branch 'origin/1.4' into merge_14_master_9 2023-12-16 20:05:03 +01:00
Mike Granby 2879b5b5d3 fix(server): Add security levels to policies (#6170) 2023-12-10 22:11:20 +01:00
Jannis Voelker d66c55cea5 Don't ask for a password for an empty private key ByteString 2023-11-28 17:47:18 +01:00
Julius Pfrommer 71d7423543 feat(core): Add UA_ByteString_memZero to zero-out cryptographic secrets 2023-11-28 17:47:18 +01:00
Julius Pfrommer 8756e34330 feat(server): Private key password protection with a userland callback 2023-11-28 17:47:18 +01:00
Julius Pfrommer b30640a988 refactor(plugin): Unify code-paths for adding server SecurityPolicies 2023-11-28 17:47:18 +01:00
Julius Pfrommer 3b04b0b1d8 refactor(client): Rework the client certificate password callback 2023-11-28 17:47:18 +01:00
Jannis Voelker d5b137c5e0 feat(client): Add client side support for PEM private keys with password
This commit extends UA_ClientConfig with a callback function
pointer which is called if a password protected private key in
PEM format is encountered in UA_ClientConfig_setDefaultEncryption().
2023-11-28 17:47:18 +01:00