Commit Graph

28 Commits

Author SHA1 Message Date
Julius Pfrommer 9ae8b76986 refactor(plugins): Use urn:open62541.unconfigured.application as the default ApplicationUri
We want to have the same default for client and server. So we get less
trouble with reusing certificates. Before we had to manually adjust the
client URI to say "server". That's not good...
2024-12-10 08:28:30 +01:00
Julius Pfrommer 49a981189e refactor(tools): Set a default locality for generated certificates 2022-02-14 06:04:36 +01:00
Keerthivasan Alagarsamy Senthilkumaran 1bcc5f2ed9 refractor(certs): Update the localhost.cnf
- openssl version 1.1.1 series does not require RANDFILE configuration
 - RANDFILE configuration causes error: 'Can't load /root/.rnd into RNG'

Signed-off-by: Keerthivasan Alagarsamy Senthilkumaran <keerthivasan.as@kalycito.com>
Change-Id: Ibf3871ee1a5652b2e7df2fe872003547525a7bb2
2021-04-08 16:42:08 +02:00
Mebus fd42e227e0 refactor(build): Change the Python shebangs to Python version 3 (#3911) 2020-09-25 14:19:45 +02:00
Jayanth Velusamy a963a81e76 refactor(sec): option to provide certificate name
- Add "-c" option for certificate naming

Signed-off-by: Jayanth Velusamy <jayanth.v@kalycito.com>
2020-02-07 14:36:17 +01:00
Julius Pfrommer 5065bb1159 fix(tools): Make the ApplicationUri in the certificate configurable 2019-11-13 23:19:28 +01:00
Julius Pfrommer 89145733bf refactor(tools): Use argparse for the certificate creation script 2019-11-13 23:19:28 +01:00
Jayanth Velusamy 89ada3563f [CTT] Multiple fixes
Signed-off-by: Jayanth Velusamy <jayanth.v@kalycito.com>
2019-07-24 07:13:27 +02:00
Asish Ganesh 19637d6dba [FIX] Remove localhost from hostname in server certificate
- Currently generated server certificate (server_cert.der) has
   hostname set to localhost and IP Address set to 127.0.0.1
 - In new CTT, using "localhost" as hostname in a certificate or
   EndpointUrl is not allowed
 - So modified Python script and the corresponding configuration
   file (localhost.cnf) to dynamically identify the network
   interfaces and the corresponding IP addresses
 - If there is only one interface available set the second IP
   address as 127.0.0.1

Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
2019-04-25 00:24:34 +02:00
Stefan Profanter 81148ab1eb Fix various python code quality issues
See also https://lgtm.com/projects/g/open62541/open62541/alerts
2018-11-28 16:12:12 +01:00
ckmk14 d438c438cb Create self-signed ApplicationInstanceCertificate (#1865)
* Create self-signed ApplicationInstanceCertificate

* Comments removed and changes to CMakeList
2018-06-22 23:13:50 +02:00
Markus Kocybik e8bea685ac Adds dataEncipherment to key usage extension for initial certificate 2018-06-14 20:48:47 +02:00
Sharavanan A R 6d7f08b641 [FIX] Trust list verification for secure client application
- Update UA_ByteString_allocBuffer() to UA_STACKARRAY() in the files
   examples/encryption/client_basic128rsa15.c and examples/encryption/
   client_basic256sha256.c.
 - Handle return value for remote certificate verification in
   ua_client.c file.
 - Update create_self-signed.py to generate CA certificate in .der
   format.

Change-Id: I6e84694c99c561d237ecbafb63b957d19c2e74c9
Signed-off-by: Sharavanan A R <sharavanan.ar@kalycito.com>
2018-04-16 10:44:33 +02:00
Mark Giraud 2110c8892e Fix windows script and warning (#1558) 2018-01-30 15:43:46 +01:00
Julius Pfrommer c457c43c2d create private key for server with the certificate
make a 1024 bit certificate by default (128bit)

revert to 2048bit keys

Change certificate generation script

The key length can now be supplied as a command line argument and the file names should better reflect the files purposes.
2018-01-17 15:05:00 +01:00
Julius Pfrommer c4c2c6f316 set executable bit on python scripts 2018-01-06 10:40:42 +01:00
tbeu 983f956003 Fix typos 2017-12-13 09:15:49 +01:00
FlorianPalm 810db94bca added MPL v2 license to c/h/py files 2017-02-12 08:07:27 +01:00
Sten Grüner 4b816c0b36 Certificate (#709)
* reviving server's certificates in an example

* adding a forgotten new example

* trying selfsigned on appveyor

* adding server to global server.c and the script

* path fix

* msvs fopen deprication warning disabled

* one more path fix

* one more msvs fix

* more defines for msvs warnings

* one more try

* Aux output for cert generator

* adding certificates to artifacts
2016-07-18 23:40:48 +02:00
Sten Grüner 966a7a255d reviving server's certificates in an example (#708)
* reviving server's certificates in an example

* adding a forgotten new example

* trying selfsigned on appveyor

* adding server to global server.c and the script

* path fix

* msvs fopen deprication warning disabled

* one more path fix

* one more msvs fix

* more defines for msvs warnings

* one more try
2016-07-18 23:21:14 +02:00
Stasik0 6af73e48f4 renaming server certificate to "server_cert.der", adding a self signed certificate to release, should work out, at least for CTT 2015-05-08 15:12:09 +02:00
Stasik0 998af668ed improving ENABLE_SELFSIGNED - cmake fill check for openssl now 2015-05-03 10:13:52 +02:00
Julius Pfrommer c451b5db7c enable certificate generation on windows
(cherry picked from commit 9a85b7dcb4)
2015-04-25 22:44:36 +02:00
Stasik0 113f945fbf addung discoveryUrl to the NetworkLayer interface, changed everything not to use static ips and ports, but hostname of the system 2015-03-20 11:58:12 +01:00
Stasik0 8d0f79a9b4 fixing discoveryUrls 2015-03-19 15:06:43 +01:00
Stasik0 bd779b4010 adding server uri to further nodes 2015-03-14 19:46:34 +01:00
Stasik0 d719c82936 fixing application url to match certificate 2015-03-14 15:54:44 +01:00
Stasik0 44971d3fad reworked certificate generation, UaExpert still misses revocatio lists etc, but creating a full CA will be to complex ATM 2014-09-10 11:52:54 +02:00