Commit Graph

73 Commits

Author SHA1 Message Date
Noel Graf 67312c1ad3 fix(server): Use trustlist methods in gds informationmodel 2025-02-27 14:45:52 +01:00
Julius Pfrommer c0a8522775 refactor(tests): Regenerate testing certificates
Before they were not accepted by the Unified Automation SDK, even after
adding them to the trustlist.
2025-02-19 11:27:27 +01:00
Noel Graf 50f6286107 fix(test): Reset trust list for each test case 2025-01-15 14:15:29 +01:00
Noel Graf 949b0cc4dd fix(test): Resolve incorrect checks caused by existing certificates in PKI folder 2025-01-14 22:49:30 +01:00
tomitkl 2076a9c87f feat(plugin): Add filestore Windows implementation (#7006)
* feat(plugin): Add filestore Windows implementation

* Define UA_DT_REG and UA_DT_DIR

* Remove build flag and use __linux__ or UA_ARCHITECTURE_WIN32 in places which used to check only for __linux__
2025-01-10 14:28:37 +01:00
Julius Pfrommer 9ae8b76986 refactor(plugins): Use urn:open62541.unconfigured.application as the default ApplicationUri
We want to have the same default for client and server. So we get less
trouble with reusing certificates. Before we had to manually adjust the
client URI to say "server". That's not good...
2024-12-10 08:28:30 +01:00
Julius Pfrommer 28554978c1 feat(core): Extend the binary encoding to take encoding options 2024-12-07 23:03:22 +01:00
Julius Pfrommer 21e9c240ec Merge pull request #6875 from jpfr/merge_14_master_24
Merge 1.4 to master
2024-11-29 23:56:34 +01:00
Julius Pfrommer 3785ed5c4d Merge remote-tracking branch 'origin/1.4' into merge_14_master_24 2024-11-29 21:50:04 +01:00
Noel Graf 2d89d0ca47 feat(tests): Add test cases for file writing the trust list 2024-11-14 19:41:29 +01:00
Julius Pfrommer 2b445aecf6 Merge remote-tracking branch 'origin/1.4' into merge_14_master_23 2024-11-05 17:19:45 +01:00
Thomas Zeschg b7d06eb3ee test(plugin): add tests for ECC-nistP256 policy 2024-11-04 12:44:46 +01:00
Julius Pfrommer a83bc45ccd refactor(tests): Remove misleading comments - Revocation lists are supported 2024-10-23 07:18:22 +02:00
Julius Pfrommer a75fed6389 Merge remote-tracking branch 'origin/1.3' into merge_13_14_20 2024-10-22 23:53:01 +02:00
Julius Pfrommer 96fbfc8612 fix(tests): Add a missing include to check_crl_validation.c (required for clang) 2024-10-22 23:50:15 +02:00
Noel Graf 1953451bd8 feat(test): Add test cases for updating the trustlist 2024-10-16 08:15:47 +02:00
Julius Pfrommer ff24a547d4 Merge remote-tracking branch 'origin/1.4' into merge_14_master_22 2024-10-07 22:23:25 +02:00
Julius Pfrommer e4f728648f refactor(client): Refactor the endpoint and UserIdentityToken selection
This no writes into the client config. Instead the selected endpoint is
stored internally in the client. The UserIdentityToken is selected from
this endpoint at runtime.
2024-10-05 22:11:22 +02:00
Julius Pfrommer 712cce9bb7 Merge remote-tracking branch 'origin/1.3' into merge_13_14_19 2024-10-05 22:11:22 +02:00
Julius Pfrommer 0a48591990 fix(plugins): Disable the Basic128Rsa15 and Basic256 SecurityPolicy 2024-10-03 13:47:11 +02:00
Julius Pfrommer 43e2b04a26 Merge remote-tracking branch 'origin/1.4' into merge_14_master_22 2024-10-03 10:33:56 +02:00
Julius Pfrommer ba22a98523 fix(plugins): More thorough validation that the issuer is a valid CA 2024-10-02 13:56:09 +02:00
Noel Graf c50cf1ce24 refactor(server): Adapt the updateCertificate API to the specification 2024-10-01 23:47:35 +02:00
Noel Graf 50f3789424 fix(plugin): Correctly configure the certificate for the filestore policy after updating and remove the pki prefix 2024-10-01 23:47:35 +02:00
Julius Pfrommer 2008fc2676 Merge remote-tracking branch 'origin/1.3' into merge_13_14_17 2024-09-27 22:35:01 +02:00
Julius Pfrommer fd829e246c Merge remote-tracking branch 'origin/1.3' into merge_13_14_16 2024-09-17 12:50:49 +02:00
Noel Graf 90661da2b2 feat(test): Add test cases for CRL validation 2024-09-16 17:27:51 +02:00
Noel Graf 5fa1cf643e feat(plugin): Adding filestore backend security policies (#6564)
* feat(plugin): Add filestore backend security policies to support writing updated certificates back to the file system

* feat(tests): Add test cases for the filestore security policies and the updateCertificate function

---------

Co-authored-by: Julius Pfrommer <jpfr@users.noreply.github.com>
2024-07-23 14:41:48 +02:00
Noel Graf eadae67db8 feat(plugin): Adding the create signing request function 2024-06-25 13:24:33 +02:00
Noel Graf 9c0ea6df95 refactor(server): Removed the old CertificateVerification implementation 2024-06-10 15:27:40 +02:00
Noel Graf d42454e822 feat(tests): Added test cases for the certificate groups 2024-06-04 11:43:31 +02:00
estr Eckerstorfer Andreas 51b4427f35 refactor(tests): Include stdlib.h where open62541 no longer does it
Include is needed for definition of EXIT_SUCCESS.
2024-05-14 15:10:11 +02:00
Julius Pfrommer 7f81b5e547 refactor(arch): Remove UA_REUSEADDR option -- handle in the global test server constructor 2024-03-22 11:20:20 +01:00
Noel Graf 579d51f75b feat(server): Define the CertificateGroup interface and enable gds push management capabilities in the server information model. 2024-02-23 11:37:52 +01:00
Julius Pfrommer 7b9f71dce5 Merge remote-tracking branch 'origin/1.4' into merge_14_master_9 2023-12-16 20:05:03 +01:00
Julius Pfrommer 3b04b0b1d8 refactor(client): Rework the client certificate password callback 2023-11-28 17:47:18 +01:00
Jannis Voelker d5b137c5e0 feat(client): Add client side support for PEM private keys with password
This commit extends UA_ClientConfig with a callback function
pointer which is called if a password protected private key in
PEM format is encountered in UA_ClientConfig_setDefaultEncryption().
2023-11-28 17:47:18 +01:00
Jannis Voelker f8946a1118 Add server option to allow password with None policy (#5988)
If the server is built with security support, plain text passwords
are currently rejected and no corresponding token is offered in the
None policy endpoint.
A client without encryption support is unable to authenticate using
username and password, even if a None policy endpoint is offered.

This commit adds the "allowNonePolicyPassword" option to the server
config to enable access for clients with no encryption support.
2023-11-22 16:40:30 +01:00
Julius Pfrommer dd300f3eff refactor(tests): Set a custom "fake" clock in the EventLoop for unit tests 2023-10-04 10:56:26 +02:00
Noel Graf 5ec95180c8 feat(server): Add Aes256-Sha256-RsaPss security policy 2023-07-14 17:15:28 +02:00
Julius Pfrommer 2d9bf66e15 feat(server): Use dedicate PKI for SecureChannel and Session certificates 2023-06-27 07:17:46 +02:00
Martin Brenner 08a533464d feat(plugin): Make the certificate key length and expiration date configurable (#5713) 2023-05-02 15:28:51 +02:00
Andreas Eckerstorfer 022ad60723 fix (tests): Check server instance in UNIT tests
Failed UNIT tests caused an exception in the server loop, if the
server instance could not be created.
2023-01-31 00:07:18 +01:00
Andreas Eckerstorfer 94ceea3cd5 fix(test): fix pointer parameter in check_save_rejected_cert 2023-01-18 12:11:45 +01:00
Julius Pfrommer 9c4d27ce35 Merge remote-tracking branch 'origin/1.3' into merge_13_master_8 2022-11-14 12:59:31 +01:00
Julius Pfrommer 6674768d7c Merge remote-tracking branch 'origin/1.2' into merge_12_13_7 2022-11-14 11:51:51 +01:00
Julius Pfrommer 106cd61ad9 fix(plugin): Reject all certificates for empty trust-list 2022-11-14 07:28:49 +01:00
Andreas Eckerstorfer 5dab29487e fix(plugin): Check for successful file creation (#5348)
fclose should only be called on valid FILE pointers, as fclose(0) is
undefined.
2022-09-26 22:28:39 +02:00
robertns e1d7708052 feat(server): optionally save rejected certificate (#5260) 2022-09-22 10:58:56 +02:00
Alexander Bluhm 9da153311d test(core): fix sign-conversion compiler errors 2022-07-13 17:37:03 +02:00