Avatar
Please consider registering
guest
sp_LogInOut Log Insp_Registration Register
Register | Lost password?
sp_Search Search
Advanced Search
Advanced Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
sp_Search Search
Go to Bottom
sp_Feed Topic RSSsp_TopicIcon
How do I make the client trust the certificate?
October 30, 2024
8:40, EET
Avatar
ChenYK
New Member
Members
Forum Posts: 1
Member Since:
October 30, 2024
sp_UserOfflineSmall Offline
Go to Top
1sp_Permalink sp_Print

I’m learning OPC UA.
I executed the sample program provided by ProsysOPC-Sentrol_780B881: ProsysOPC.UaSampleClient.
Every time I use it to log into the machine’s OPC server, I get a Bad_CertificateUntrusted error message.
When I enter User/Password through the dialog box of the sample program and click ,
I can browse the nodes provided by the OPC server normally.
The OPC server manufacturer told me that the Client needs to trust the certificate at least once.

I tracked the program and found that the PassedChecks returned by UaClient.OnValidateCertificate lacked the status of cvcTrusted and cvcValidity.
How do I make the client trust the certificate?

October 30, 2024
15:54, EET
Avatar
Jouni Aro
Moderator
Moderators
Forum Posts: 1029
Member Since:
December 21, 2011
sp_UserOfflineSmall Offline
sp_UserWebsite
Go to Top
2sp_Permalink sp_Print

The client needs to trust the server certificate and the server needs to trust the client certificate.

If the client does not accept the certificate, it will prompt the user.

If cvcValidity is missing, it indicates that the certificate has probably been expired.
So, if you can find it from the rejected certificates in the disk, you can check the validity period of it. And if that turns out to be the case, you need to find out how to renew the server certificate.

November 4, 2024
16:29, EET
Avatar
Jouni Aro
Moderator
Moderators
Forum Posts: 1029
Member Since:
December 21, 2011
sp_UserOfflineSmall Offline
sp_UserWebsite
Go to Top
3sp_Permalink sp_Print

Further analysis reveals that the server certificate is missing the keyCertSign flag, although it is a self-signed certificate. This is required in the OPC UA specification:

https://reference.opcfoundatio…..docs/6.2.2

sp_Feed All RSS
Go to top
Forum Timezone: Europe/Helsinki
Most Users Ever Online: 1919
Currently Online:
Guest(s) 17
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Heikki Tahvanainen: 402
hbrackel: 144
rocket science: 90
pramanj: 86
Francesco Zambon: 83
Ibrahim: 78
Sabari: 62
kapsl: 57
gjevremovic: 49
Xavier: 43
Member Stats:
Guest Posters: 0
Members: 733
Moderators: 8
Admins: 1
Forum Stats:
Groups: 3
Forums: 15
Topics: 1545
Posts: 6516
Newest Members:
ptdenriqueta, basilpullman, Richardmip, mood edibles, LouieWreve, daniellabdx, janessan21, sammiebeak359, gena7127517, thorstenbouldin
Moderators: Jouni Aro: 1029, Pyry: 1, Petri: 1, Bjarne Boström: 1045, Jimmy Ni: 26, Matti Siponen: 353, Lusetti: 0, Elias: 0
Administrators: admin: 1