BobinkCOpcUa/tests/secure_cert, branch masterOPC UA applications in Chttp://git.tvcloud.fr/cgit.cgi/BobinkCOpcUa/atom?h=master2026-02-18T21:32:08ZMove certificates into per-test directories2026-02-18T21:32:08ZThomas Vanbesientvanbesi@proton.me2026-02-18T21:30:06Zurn:sha1:5f5e172cd2392952162398c85b07e6f6b7e69398
Each secure test now has its own certs/ subfolder with per-identity
subdirectories and a single shared trust store. Configs reference
paths relative to the project root (e.g. tests/secure_anonymous/
certs/ServerLDS/cert.der). Cert generation logic removed from test
scripts since certs are now pre-generated and committed.
Remove redundant config/ dir, use Aes256_Sha256_RsaPss everywhere2026-02-18T21:07:07ZThomas Vanbesientvanbesi@proton.me2026-02-18T21:07:07Zurn:sha1:95f40458a9dd927fba35624564b64b5f973dd9fe
The config/ example files duplicated the test configs. Remove them and
point the Running docs at tests/secure_user/ instead. Switch the
security policy from Basic256Sha256 to Aes256_Sha256_RsaPss in all
test configs, CMakeLists.txt, and readme.md.
Add X509 certificate identity token authentication2026-02-18T20:44:17ZThomas Vanbesientvanbesi@proton.me2026-02-18T20:44:17Zurn:sha1:deaabd1464784a6fddbfa9e1ac6cb0e1148a8c34
Support authMode=cert alongside anonymous and user. The client
reuses its application certificate as the X509 identity token
(open62541 requires both to match). Server-side access control
advertises the certificate token policy automatically when
sessionPKI is configured.