mirror of
https://github.com/open62541/open62541.git
synced 2026-10-19 06:21:12 +08:00
Asish Ganesh
436f29b03a
- At present issuer list is passed in trust list
- Add functionality to pass the issuer list separately
- Handle condition where a client is connected using
an (trusted) issued certificate of a CA that is not
trusted but available
- This resolves test case number 044.js and 045.js in
Security Certificate Validation to pass simultaneously
- usage : ./server_ctt <server-certificate.der> <private-key.der>
[--trustlist <tl1.ctl> <tl2.ctl> ... ]
[--issuerlist <il1.der> <il2.der> ... ]
[--revocationlist <rv1.crl> <rv2.crl> ...]
Change-Id: I4a25af9f4c2b771da9492fafb534f72dcc6fc17d
Signed-off-by: Asish Ganesh <asish.g@kalycito.com>
79 lines
2.6 KiB
C
79 lines
2.6 KiB
C
/* This work is licensed under a Creative Commons CCZero 1.0 Universal License.
|
|
* See http://creativecommons.org/publicdomain/zero/1.0/ for more information.
|
|
*
|
|
* Copyright 2019 (c) Kalycito Infotech Private Limited
|
|
*
|
|
*/
|
|
|
|
#include <open62541/client_highlevel.h>
|
|
#include <open62541/plugin/log_stdout.h>
|
|
#include <open62541/plugin/securitypolicy.h>
|
|
#include <open62541/server.h>
|
|
#include <open62541/server_config_default.h>
|
|
|
|
#include <signal.h>
|
|
#include <stdlib.h>
|
|
|
|
#include "common.h"
|
|
|
|
UA_Boolean running = true;
|
|
static void stopHandler(int sig) {
|
|
UA_LOG_INFO(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND, "received ctrl-c");
|
|
running = false;
|
|
}
|
|
|
|
int main(int argc, char* argv[]) {
|
|
signal(SIGINT, stopHandler);
|
|
signal(SIGTERM, stopHandler);
|
|
|
|
if(argc < 3) {
|
|
UA_LOG_FATAL(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND,
|
|
"Missing arguments. Arguments are "
|
|
"<server-certificate.der> <private-key.der> "
|
|
"[<trustlist1.crl>, ...]");
|
|
return EXIT_FAILURE;
|
|
}
|
|
|
|
/* Load certificate and private key */
|
|
UA_ByteString certificate = loadFile(argv[1]);
|
|
UA_ByteString privateKey = loadFile(argv[2]);
|
|
|
|
/* Load the trustlist */
|
|
size_t trustListSize = 0;
|
|
if(argc > 3)
|
|
trustListSize = (size_t)argc-3;
|
|
UA_STACKARRAY(UA_ByteString, trustList, trustListSize);
|
|
for(size_t i = 0; i < trustListSize; i++)
|
|
trustList[i] = loadFile(argv[i+3]);
|
|
|
|
/* Loading of a issuer list, not used in this application */
|
|
size_t issuerListSize = 0;
|
|
UA_ByteString *issuerList = NULL;
|
|
|
|
/* Loading of a revocation list currently unsupported */
|
|
UA_ByteString *revocationList = NULL;
|
|
size_t revocationListSize = 0;
|
|
|
|
UA_Server *server = UA_Server_new();
|
|
UA_ServerConfig *config = UA_Server_getConfig(server);
|
|
|
|
UA_StatusCode retval =
|
|
UA_ServerConfig_setDefaultWithSecurityPolicies(config, 4840,
|
|
&certificate, &privateKey,
|
|
trustList, trustListSize,
|
|
issuerList, issuerListSize,
|
|
revocationList, revocationListSize);
|
|
UA_ByteString_clear(&certificate);
|
|
UA_ByteString_clear(&privateKey);
|
|
for(size_t i = 0; i < trustListSize; i++)
|
|
UA_ByteString_clear(&trustList[i]);
|
|
if(retval != UA_STATUSCODE_GOOD)
|
|
goto cleanup;
|
|
|
|
retval = UA_Server_run(server, &running);
|
|
|
|
cleanup:
|
|
UA_Server_delete(server);
|
|
return retval == UA_STATUSCODE_GOOD ? EXIT_SUCCESS : EXIT_FAILURE;
|
|
}
|