Noel Graf
67312c1ad3
fix(server): Use trustlist methods in gds informationmodel
2025-02-27 14:45:52 +01:00
Julius Pfrommer
c0a8522775
refactor(tests): Regenerate testing certificates
...
Before they were not accepted by the Unified Automation SDK, even after
adding them to the trustlist.
2025-02-19 11:27:27 +01:00
Noel Graf
50f6286107
fix(test): Reset trust list for each test case
2025-01-15 14:15:29 +01:00
Noel Graf
949b0cc4dd
fix(test): Resolve incorrect checks caused by existing certificates in PKI folder
2025-01-14 22:49:30 +01:00
tomitkl
2076a9c87f
feat(plugin): Add filestore Windows implementation ( #7006 )
...
* feat(plugin): Add filestore Windows implementation
* Define UA_DT_REG and UA_DT_DIR
* Remove build flag and use __linux__ or UA_ARCHITECTURE_WIN32 in places which used to check only for __linux__
2025-01-10 14:28:37 +01:00
Julius Pfrommer
9ae8b76986
refactor(plugins): Use urn:open62541.unconfigured.application as the default ApplicationUri
...
We want to have the same default for client and server. So we get less
trouble with reusing certificates. Before we had to manually adjust the
client URI to say "server". That's not good...
2024-12-10 08:28:30 +01:00
Julius Pfrommer
28554978c1
feat(core): Extend the binary encoding to take encoding options
2024-12-07 23:03:22 +01:00
Julius Pfrommer
21e9c240ec
Merge pull request #6875 from jpfr/merge_14_master_24
...
Merge 1.4 to master
2024-11-29 23:56:34 +01:00
Julius Pfrommer
3785ed5c4d
Merge remote-tracking branch 'origin/1.4' into merge_14_master_24
2024-11-29 21:50:04 +01:00
Noel Graf
2d89d0ca47
feat(tests): Add test cases for file writing the trust list
2024-11-14 19:41:29 +01:00
Julius Pfrommer
2b445aecf6
Merge remote-tracking branch 'origin/1.4' into merge_14_master_23
2024-11-05 17:19:45 +01:00
Thomas Zeschg
b7d06eb3ee
test(plugin): add tests for ECC-nistP256 policy
2024-11-04 12:44:46 +01:00
Julius Pfrommer
a83bc45ccd
refactor(tests): Remove misleading comments - Revocation lists are supported
2024-10-23 07:18:22 +02:00
Julius Pfrommer
a75fed6389
Merge remote-tracking branch 'origin/1.3' into merge_13_14_20
2024-10-22 23:53:01 +02:00
Julius Pfrommer
96fbfc8612
fix(tests): Add a missing include to check_crl_validation.c (required for clang)
2024-10-22 23:50:15 +02:00
Noel Graf
1953451bd8
feat(test): Add test cases for updating the trustlist
2024-10-16 08:15:47 +02:00
Julius Pfrommer
ff24a547d4
Merge remote-tracking branch 'origin/1.4' into merge_14_master_22
2024-10-07 22:23:25 +02:00
Julius Pfrommer
e4f728648f
refactor(client): Refactor the endpoint and UserIdentityToken selection
...
This no writes into the client config. Instead the selected endpoint is
stored internally in the client. The UserIdentityToken is selected from
this endpoint at runtime.
2024-10-05 22:11:22 +02:00
Julius Pfrommer
712cce9bb7
Merge remote-tracking branch 'origin/1.3' into merge_13_14_19
2024-10-05 22:11:22 +02:00
Julius Pfrommer
0a48591990
fix(plugins): Disable the Basic128Rsa15 and Basic256 SecurityPolicy
2024-10-03 13:47:11 +02:00
Julius Pfrommer
43e2b04a26
Merge remote-tracking branch 'origin/1.4' into merge_14_master_22
2024-10-03 10:33:56 +02:00
Julius Pfrommer
ba22a98523
fix(plugins): More thorough validation that the issuer is a valid CA
2024-10-02 13:56:09 +02:00
Noel Graf
c50cf1ce24
refactor(server): Adapt the updateCertificate API to the specification
2024-10-01 23:47:35 +02:00
Noel Graf
50f3789424
fix(plugin): Correctly configure the certificate for the filestore policy after updating and remove the pki prefix
2024-10-01 23:47:35 +02:00
Julius Pfrommer
2008fc2676
Merge remote-tracking branch 'origin/1.3' into merge_13_14_17
2024-09-27 22:35:01 +02:00
Julius Pfrommer
fd829e246c
Merge remote-tracking branch 'origin/1.3' into merge_13_14_16
2024-09-17 12:50:49 +02:00
Noel Graf
90661da2b2
feat(test): Add test cases for CRL validation
2024-09-16 17:27:51 +02:00
Noel Graf
5fa1cf643e
feat(plugin): Adding filestore backend security policies ( #6564 )
...
* feat(plugin): Add filestore backend security policies to support writing updated certificates back to the file system
* feat(tests): Add test cases for the filestore security policies and the updateCertificate function
---------
Co-authored-by: Julius Pfrommer <jpfr@users.noreply.github.com >
2024-07-23 14:41:48 +02:00
Noel Graf
eadae67db8
feat(plugin): Adding the create signing request function
2024-06-25 13:24:33 +02:00
Noel Graf
9c0ea6df95
refactor(server): Removed the old CertificateVerification implementation
2024-06-10 15:27:40 +02:00
Noel Graf
d42454e822
feat(tests): Added test cases for the certificate groups
2024-06-04 11:43:31 +02:00
estr Eckerstorfer Andreas
51b4427f35
refactor(tests): Include stdlib.h where open62541 no longer does it
...
Include is needed for definition of EXIT_SUCCESS.
2024-05-14 15:10:11 +02:00
Julius Pfrommer
7f81b5e547
refactor(arch): Remove UA_REUSEADDR option -- handle in the global test server constructor
2024-03-22 11:20:20 +01:00
Noel Graf
579d51f75b
feat(server): Define the CertificateGroup interface and enable gds push management capabilities in the server information model.
2024-02-23 11:37:52 +01:00
Julius Pfrommer
7b9f71dce5
Merge remote-tracking branch 'origin/1.4' into merge_14_master_9
2023-12-16 20:05:03 +01:00
Julius Pfrommer
3b04b0b1d8
refactor(client): Rework the client certificate password callback
2023-11-28 17:47:18 +01:00
Jannis Voelker
d5b137c5e0
feat(client): Add client side support for PEM private keys with password
...
This commit extends UA_ClientConfig with a callback function
pointer which is called if a password protected private key in
PEM format is encountered in UA_ClientConfig_setDefaultEncryption().
2023-11-28 17:47:18 +01:00
Jannis Voelker
f8946a1118
Add server option to allow password with None policy ( #5988 )
...
If the server is built with security support, plain text passwords
are currently rejected and no corresponding token is offered in the
None policy endpoint.
A client without encryption support is unable to authenticate using
username and password, even if a None policy endpoint is offered.
This commit adds the "allowNonePolicyPassword" option to the server
config to enable access for clients with no encryption support.
2023-11-22 16:40:30 +01:00
Julius Pfrommer
dd300f3eff
refactor(tests): Set a custom "fake" clock in the EventLoop for unit tests
2023-10-04 10:56:26 +02:00
Noel Graf
5ec95180c8
feat(server): Add Aes256-Sha256-RsaPss security policy
2023-07-14 17:15:28 +02:00
Julius Pfrommer
2d9bf66e15
feat(server): Use dedicate PKI for SecureChannel and Session certificates
2023-06-27 07:17:46 +02:00
Martin Brenner
08a533464d
feat(plugin): Make the certificate key length and expiration date configurable ( #5713 )
2023-05-02 15:28:51 +02:00
Andreas Eckerstorfer
022ad60723
fix (tests): Check server instance in UNIT tests
...
Failed UNIT tests caused an exception in the server loop, if the
server instance could not be created.
2023-01-31 00:07:18 +01:00
Andreas Eckerstorfer
94ceea3cd5
fix(test): fix pointer parameter in check_save_rejected_cert
2023-01-18 12:11:45 +01:00
Julius Pfrommer
9c4d27ce35
Merge remote-tracking branch 'origin/1.3' into merge_13_master_8
2022-11-14 12:59:31 +01:00
Julius Pfrommer
6674768d7c
Merge remote-tracking branch 'origin/1.2' into merge_12_13_7
2022-11-14 11:51:51 +01:00
Julius Pfrommer
106cd61ad9
fix(plugin): Reject all certificates for empty trust-list
2022-11-14 07:28:49 +01:00
Andreas Eckerstorfer
5dab29487e
fix(plugin): Check for successful file creation ( #5348 )
...
fclose should only be called on valid FILE pointers, as fclose(0) is
undefined.
2022-09-26 22:28:39 +02:00
robertns
e1d7708052
feat(server): optionally save rejected certificate ( #5260 )
2022-09-22 10:58:56 +02:00
Alexander Bluhm
9da153311d
test(core): fix sign-conversion compiler errors
2022-07-13 17:37:03 +02:00