18:10, EEST
October 22, 2020
Hi,I’m a begginer in OPC UA and.
I have the free version of OPC UA Browser and OPC UA Simulation Server
When I try to establish a connection via https, the OPC UA Browser pops up a menu where I have to select the server I want to connect. Then, when I click the server, the same menu(server selection) appears again(a loop). But the connection never gets established. The UA TCP connection works well.
I have the UA HTTPS enabled with port 51443. And I don’t get wrong typing the connection beucase as I said I can see the server I want to select.
I tried creating a user and password to get connected but anythig works.
How can I solve this?
Sorry for my english and thanks.
11:03, EEST
Moderators
February 11, 2020
Hello,
Simulation Server’s certificate for opc.https connections is not self-signed, so you’ll have to trust the certification authority (CA) certificate that was used to sign it to in order to form a connection. At the moment this has to be done manually by copying SimulationServerCA.der from \.prosysopc\prosys-opc-ua-simulation-server\PKI\CA\private to \.prosysopc\prosys-opc-ua-browser\PKI\CA\certs, where is your home folder where .prosysopc folder is located. If you do not perform this step, you will see the menu appear again and again.
If you’re using 4.0.4-247 or a newer version of Browser, then there is a programming oversigth that prevents Browser from connecting to Simulation Server via opc.https. Newer versions of Browser require that a CA certificate provides a certificate revocation list (CRL) that can be used to check the revocation status of certificates they have signed. See the OPC UA Specification for more information on the topic (https://reference.opcfoundation.org/v104/Core/docs/Part4/6.1.3/). However, the CA certificate used by Simulation Server doesn’t provide a CRL, which results in all certificates signed by the CA being treated as invalid preventing Browser from connecting to Simulation Server via opc.https.
Upcoming versions of Browser shall no longer require CA certificates to provide CRLs. Since you also contacted us by email, I shall send you a download link to a beta build of Browser that contains this change. Let us know if that solves the issue you’re facing.
Most Users Ever Online: 1919
Currently Online:
12 Guest(s)
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Heikki Tahvanainen: 402
hbrackel: 144
rocket science: 88
pramanj: 86
Francesco Zambon: 83
Ibrahim: 78
Sabari: 62
kapsl: 57
gjevremovic: 49
Xavier: 43
Member Stats:
Guest Posters: 0
Members: 726
Moderators: 7
Admins: 1
Forum Stats:
Groups: 3
Forums: 15
Topics: 1529
Posts: 6471
Newest Members:
gabriellabachus, Deakin, KTP25Zof, Wojciech Kubala, efrennowell431, wilfredostuart, caitlynfajardo, jeromechubb7, franciscagrimwad, adult_galleryModerators: Jouni Aro: 1026, Pyry: 1, Petri: 0, Bjarne Boström: 1032, Jimmy Ni: 26, Matti Siponen: 349, Lusetti: 0
Administrators: admin: 1