Hello,
my problem is that on the manual called “Prosys_OPC_UA_SDK_for_Java_Client_Tutorial.pdf” (which I found in the sdk I bought), in chapter “6.1.2. Application Instance Certificate” and chapter “6.1.3. Issuer Certificate”, it is explained how to create a self-signed certificate. Quoting: “On the first run, it creates the certificate and the private key
and stores them in the files SampleConsoleClient@hostname_keysize.der and SampleConsoleClient@hostname_keysize.pem respectively”. And so on.

I don’t need to create my certificate and private key.

I have received the a certificate (file .der) and a private key (file .pem) by the company that installed the manufacturing machine that uses the opc-ua server.
I need to use those two file to connect to the opc-ua server using java in order to read the data of the manufacturing machine.
The procedure of connecting to an opc-ua server using existing certificate and private key is not explained in the user manual (as far as I understood). Is there any other manual which explains this ? Or, is there any code sample?

Hello,
I’ve tried the second option you suggested.
Indeed, here is the code I wrote:

File certFile = new File(“bihlerOpcUaVC1Client [3FF47E159FB52B67FDD23EBA3145E83BA0FC1367].der”);
File privKeyFile = new File(“bihlerOpcUaVC1Client [3FF47E159FB52B67FDD23EBA3145E83BA0FC1367].pem”);
Cert cert = Cert.load(certFile);
PrivKey privKey = PrivKey.load(privKeyFile, null);
final PkiDirectoryCertificateStore certStore = new PkiDirectoryCertificateStore();
final DefaultCertificateValidator validator = new DefaultCertificateValidator(certStore);
validator.setValidationListener(validationListener);
uaClient.setCertificateValidator(validator);
UserIdentity userIdentity = new UserIdentity(cert, privKey);
uaClient.setUserIdentity(userIdentity);

private static DefaultCertificateValidatorListener validationListener = new DefaultCertificateValidatorListener() {
@Override
public ValidationResult onValidate(Cert certificate, ApplicationDescription applicationDescription, EnumSet passedChecks) {
return ValidationResult.AcceptPermanently;
}
};

Once I call the function connect() of the uaClient, I get the following error:

[localhost-startStop-1] INFO com.prosysopc.ua.stack.cert.PkiDirectoryCertificateStore – Certificate ’89A703B8A5C0B69C67715453B13FFED5165B6E3F’ added to rejected certificates.
com.prosysopc.ua.ServiceException: Invalid server certificate ServiceResult=Bad_CertificateChainIncomplete (0x810D0000) “The certificate chain is incomplete.” Diagnostics=Diagnostic Info: Invalid server certificate

I’ve tried to execute the code in debug and I’ve noticed that it never passes through the function onValidate of the validationListener.
What is missing?