mirror of
https://github.com/open62541/open62541.git
synced 2026-10-18 05:36:49 +08:00
Julius Pfrommer
9ae8b76986
We want to have the same default for client and server. So we get less trouble with reusing certificates. Before we had to manually adjust the client URI to say "server". That's not good...
92 lines
3.5 KiB
C
92 lines
3.5 KiB
C
/* This work is licensed under a Creative Commons CCZero 1.0 Universal License.
|
|
* See http://creativecommons.org/publicdomain/zero/1.0/ for more information. */
|
|
|
|
#include <open62541/client_config_default.h>
|
|
#include <open62541/client_highlevel.h>
|
|
#include <open62541/plugin/log_stdout.h>
|
|
#include <open62541/plugin/securitypolicy.h>
|
|
#include <open62541/server.h>
|
|
#include <open62541/server_config_default.h>
|
|
|
|
#include <stdlib.h>
|
|
|
|
#include "common.h"
|
|
|
|
#define MIN_ARGS 4
|
|
|
|
int main(int argc, char* argv[]) {
|
|
if(argc < MIN_ARGS) {
|
|
UA_LOG_FATAL(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND,
|
|
"Arguments are missing. The required arguments are "
|
|
"<opc.tcp://host:port> "
|
|
"<client-certificate.der> <client-private-key.der> "
|
|
"[<trustlist1.crl>, ...]");
|
|
return EXIT_SUCCESS;
|
|
}
|
|
|
|
const char *endpointUrl = argv[1];
|
|
|
|
/* Load certificate and private key */
|
|
UA_ByteString certificate = loadFile(argv[2]);
|
|
UA_ByteString privateKey = loadFile(argv[3]);
|
|
|
|
/* Load the trustlist */
|
|
size_t trustListSize = 0;
|
|
if(argc > MIN_ARGS)
|
|
trustListSize = (size_t)argc-MIN_ARGS;
|
|
UA_STACKARRAY(UA_ByteString, trustList, trustListSize+1);
|
|
for(size_t trustListCount = 0; trustListCount < trustListSize; trustListCount++)
|
|
trustList[trustListCount] = loadFile(argv[trustListCount+4]);
|
|
|
|
/* Revocation lists are supported, but not used for the example here */
|
|
UA_ByteString *revocationList = NULL;
|
|
size_t revocationListSize = 0;
|
|
|
|
UA_Client *client = UA_Client_new();
|
|
UA_ClientConfig *cc = UA_Client_getConfig(client);
|
|
cc->securityMode = UA_MESSAGESECURITYMODE_SIGNANDENCRYPT;
|
|
UA_StatusCode retval = UA_ClientConfig_setDefaultEncryption(cc, certificate, privateKey,
|
|
trustList, trustListSize,
|
|
revocationList, revocationListSize);
|
|
if(retval != UA_STATUSCODE_GOOD) {
|
|
UA_LOG_FATAL(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND,
|
|
"Failed to set encryption." );
|
|
UA_Client_delete(client);
|
|
return EXIT_FAILURE;
|
|
}
|
|
|
|
UA_ByteString_clear(&certificate);
|
|
UA_ByteString_clear(&privateKey);
|
|
for(size_t deleteCount = 0; deleteCount < trustListSize; deleteCount++) {
|
|
UA_ByteString_clear(&trustList[deleteCount]);
|
|
}
|
|
|
|
/* Secure client connect */
|
|
cc->securityMode = UA_MESSAGESECURITYMODE_SIGNANDENCRYPT; /* require encryption */
|
|
retval = UA_Client_connect(client, endpointUrl);
|
|
if(retval != UA_STATUSCODE_GOOD) {
|
|
UA_Client_delete(client);
|
|
return EXIT_FAILURE;
|
|
}
|
|
|
|
UA_Variant value;
|
|
UA_Variant_init(&value);
|
|
|
|
/* NodeId of the variable holding the current time */
|
|
const UA_NodeId nodeId = UA_NS0ID(SERVER_SERVERSTATUS_CURRENTTIME);
|
|
retval = UA_Client_readValueAttribute(client, nodeId, &value);
|
|
|
|
if(retval == UA_STATUSCODE_GOOD &&
|
|
UA_Variant_hasScalarType(&value, &UA_TYPES[UA_TYPES_DATETIME])) {
|
|
UA_DateTime raw_date = *(UA_DateTime *) value.data;
|
|
UA_DateTimeStruct dts = UA_DateTime_toStruct(raw_date);
|
|
UA_LOG_INFO(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND, "date is: %u-%u-%u %u:%u:%u.%03u\n",
|
|
dts.day, dts.month, dts.year, dts.hour, dts.min, dts.sec, dts.milliSec);
|
|
}
|
|
|
|
/* Clean up */
|
|
UA_Variant_clear(&value);
|
|
UA_Client_delete(client);
|
|
return retval == UA_STATUSCODE_GOOD ? EXIT_SUCCESS : EXIT_FAILURE;
|
|
}
|