Avatar

Please consider registering
guest

sp_LogInOut Log In sp_Registration Register

Register | Lost password?
sp_Search Search
Advanced Search
Advanced Search

— Forum Scope —




— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

sp_Search Search
Go to Bottom
No permission to create posts
sp_Feed Topic RSS sp_TopicIcon
How do I make the client trust the certificate?
October 30, 2024
8:40, EET
Avatar
ChenYK
New Member
Members
Forum Posts: 1
Member Since:
October 30, 2024
sp_UserOfflineSmall Offline
Go to Top
1sp_Permalink sp_Print

I’m learning OPC UA.
I executed the sample program provided by ProsysOPC-Sentrol_780B881: ProsysOPC.UaSampleClient.
Every time I use it to log into the machine’s OPC server, I get a Bad_CertificateUntrusted error message.
When I enter User/Password through the dialog box of the sample program and click ,
I can browse the nodes provided by the OPC server normally.
The OPC server manufacturer told me that the Client needs to trust the certificate at least once.

I tracked the program and found that the PassedChecks returned by UaClient.OnValidateCertificate lacked the status of cvcTrusted and cvcValidity.
How do I make the client trust the certificate?

October 30, 2024
15:54, EET
Avatar
Jouni Aro
Moderator
Moderators
Forum Posts: 1026
Member Since:
December 21, 2011
sp_UserOfflineSmall Offline
sp_UserWebsite
Go to Top
2sp_Permalink sp_Print

The client needs to trust the server certificate and the server needs to trust the client certificate.

If the client does not accept the certificate, it will prompt the user.

If cvcValidity is missing, it indicates that the certificate has probably been expired.
So, if you can find it from the rejected certificates in the disk, you can check the validity period of it. And if that turns out to be the case, you need to find out how to renew the server certificate.

November 4, 2024
16:29, EET
Avatar
Jouni Aro
Moderator
Moderators
Forum Posts: 1026
Member Since:
December 21, 2011
sp_UserOfflineSmall Offline
sp_UserWebsite
Go to Top
3sp_Permalink sp_Print

Further analysis reveals that the server certificate is missing the keyCertSign flag, although it is a self-signed certificate. This is required in the OPC UA specification:

https://reference.opcfoundation.org/Core/Part6/v105/docs/6.2.2

No permission to create posts
sp_Feed All RSS
Go to top
Forum Timezone: Europe/Helsinki

Most Users Ever Online: 1919

Currently Online:
37 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Top Posters:

Heikki Tahvanainen: 402

hbrackel: 144

rocket science: 88

pramanj: 86

Francesco Zambon: 83

Ibrahim: 78

Sabari: 62

kapsl: 57

gjevremovic: 49

Xavier: 43

Member Stats:

Guest Posters: 0

Members: 734

Moderators: 7

Admins: 1

Forum Stats:

Groups: 3

Forums: 15

Topics: 1523

Posts: 6449

Newest Members:

christamcdowall, redaahern07571, nigelbdhmp, travistimmons, AnnelCib, dalenegettinger, howardkennerley, Thomassnism, biancacraft16, edgardo3518

Moderators: Jouni Aro: 1026, Pyry: 1, Petri: 0, Bjarne Boström: 1026, Jimmy Ni: 26, Matti Siponen: 346, Lusetti: 0

Administrators: admin: 1