Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed verification of sender certificate in CreateSessionRequest #6547

Open
wants to merge 1 commit into
base: 1.3
Choose a base branch
from

Conversation

phuong-nm
Copy link

Fix for issue #6462.

@CLAassistant
Copy link

CLAassistant commented Jun 17, 2024

CLA assistant check
All committers have signed the CLA.

@phuong-nm phuong-nm changed the base branch from master to 1.3 June 17, 2024 09:42
@jpfr
Copy link
Member

jpfr commented Jun 18, 2024

Not sure about this.
If the client uses a certificate, then we should also validate it.
Please explain the scenario where this is needed.

We could make this a UA_RuleHandling configuration option…

@phuong-nm
Copy link
Author

@jpfr this problem is already described in details in the issue #6462. It is also confirmed in OPC UA forum that the sender certificate in CreateSessionRequest shall be ignored if the securityPolicyUri is None. Hence, the server shall not perform any verification of client certificate parameter of the request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants