Comments (4)
What we already tried:
- #658 does not apply as we checked manually that the generated Key Size matches the one which the server excepts
- #593 does not apply, because it works with UAExpert without any problem (and they are using self-signed certificates as well)
from opcua.
Hmm, it says Certificate Validation failed. Reason=BadCertificateUntrusted
.
I vaguely remember that there were some weird issues with padding. I assume you've done all the obvious stuff, like marking the certificate as trusted in the server.
The other thing you could try is to create a root certificate and sign a client certificate with that. Then import the root cert into the server as a trusted authority to see if that changes anything.
I am not the expert on the crypto code. @dwhutchison do you maybe have an idea?
from opcua.
Thank you for your reply! I assume it has nothing to do with trusting the certificate, as other clients as UAExpert and other tools can access the server without their certificate being needed to trust.
We could try your approach with the root certificate, maybe even let it create with a different tool. With this we could check if there is a problem with the certificate generation, or if its with the secure connection.
@dwhutchison If you have any other pointers for us, that would be great!
from opcua.
I think the reason was quite stupid: it happened when we were creating the certificate as always, but then selecting a authentication method that was unsupported. We still don;t know if it is a client or server issue, however swtiching to "Basic256Sha256" works.
Also another side issue: the error returned from the server is only available when debugging, but is overwritten at some point in the code with EOF. If anyone in the future has that problem, just open a debugger and fetch the proper error message
from opcua.
Related Issues (20)
- Error writing ByteString array (readChunk EOF)
- Call has no InputArguments
- Working Server Example HOT 28
- Inconsistent Data when get opc value from kepserver 5.21 HOT 1
- monitor: add support to modify subscription, monitored items, and set monitoring mode
- subscription: add SetMonitoringMode functionality
- subscription: add ModifySubscription functionality
- Trouble with calling NewClient() HOT 1
- Connection Refused with Valid Security Options HOT 1
- ReverseHello, invalid endpoint
- nil pointer when reading data with ua-datatype TypeIDNull
- Get rid of dependencies HOT 3
- Error when using expanded nodeid
- Feture: Reduce memory allocation during the Encode process to improve encoding performance.
- SIGSEGV when attempting to reading i=84 against simulator.
- [Question] Need some help registering custom UDTs
- Bug: Client fails to trust CA signed server certificates
- Example / Method for browsing nodes to get the child node and its details
- The extension object cannot be (de)serialized because the data type id is not recognized. StatusBadDataTypeIdUnknown (0x80110000)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from opcua.