BobinkCOpcUa/tests/unsecure_anonymous, branch masterOPC UA applications in Chttp://git.tvcloud.fr/cgit.cgi/BobinkCOpcUa/atom?h=master2026-02-18T19:30:33ZExtract createUnsecureClientConfig, fix None endpoint negotiation2026-02-18T19:30:33ZThomas Vanbesientvanbesi@proton.me2026-02-18T19:30:33Zurn:sha1:70381b3381d77845dbc04fd521b729b7098134a5
UA_ClientConfig_setDefault leaves securityMode at SignAndEncrypt,
so unsecure clients failed endpoint negotiation when the LDS only
offered None endpoints. Extract the unsecure client setup into
createUnsecureClientConfig() which explicitly sets securityMode and
securityPolicyUri to None.
Also enable discovery-only None endpoint on ServerRegister so
unencrypted clients can discover it, and update the unsecure_anonymous
test configs to run fully without encryption.
Add None endpoint so unsecure clients can discover secure servers2026-02-18T16:11:35ZThomas Vanbesientvanbesi@proton.me2026-02-18T15:56:44Zurn:sha1:80aa098905cd7925cf6b665bba9d69621c44cc04
UA_ServerConfig_addSecurityPolicyNone only adds the security policy,
not an endpoint entry. Without a None endpoint in the GetEndpoints
response, the open62541 client's internal endpoint negotiation fails
with BadIdentityTokenRejected before the FindServers request is sent.
Adding the endpoint via UA_ServerConfig_addEndpoint makes the None
endpoint visible; securityPolicyNoneDiscoveryOnly still restricts it
to discovery services only.
Make client/server encryption optional, rename tests to full names2026-02-18T14:39:29ZThomas Vanbesientvanbesi@proton.me2026-02-18T14:39:29Zurn:sha1:99b5b4416193fafaa815746ea756900d2ab26917
Make encryption optional for both ServerRegister's LDS client
connection and the server side of ServerLDS/ServerRegister: when
certificate, privateKey, and trustStore are omitted the programs
run with SecurityPolicy#None only. Secure servers also add a
discovery-only None endpoint so unencrypted clients can still call
FindServers and GetEndpoints.
Consolidate tests from 5 policy-specific cases (nosec_anon,
none_user, basic256sha256_anon, aes256_anon, aes128_user) down to
3 that cover the important axes: unsecure_anonymous,
secure_anonymous, secure_user. Rename directories to use full
names. Auto-generate certificates and trust stores in run_test.sh.
Update readme and CLAUDE.md to reflect the current program
interface (unified Client binary, split ServerRegister configs)
and the new test names.