Replace ClientFindServers with unified Client, use trust store directories

Replace the single-purpose ClientFindServers program with a unified Client
that supports three operations via CLI: find-servers, get-endpoints, and
read-time.  This simplifies the architecture by using one client binary with
a single config file instead of a monolithic program that did everything in
one run.

Split the ServerRegister config into separate server and client config files
so the LDS-registration credentials are isolated from the server's own
settings.  The discovery URL moves from config to a CLI argument.

Replace repeated trustList config entries with a single trustStore directory
path.  Each program now points to a directory under certs/trust/ containing
.der files, so adding or removing trust is a file-copy operation rather than
editing every config file.  Add loadTrustStore()/freeTrustStore() to
common.c and remove the now-unused configGetAll() from the config parser.

Simplify the test matrix from 6 to 4 cases (security and auth are
orthogonal, so the full 3x2 matrix is unnecessary).  Update run_test.sh to
invoke the new Client three times and use port-polling instead of sleep.

1 files changed, 23 insertions, 0 deletions

diff --git a/config/client.conf b/config/client.conf
new file mode 100644
index 0000000..1d3fe1b
--- /dev/null
+++ b/config/client.conf
@@ -0,0 +1,23 @@
+# Client configuration
+#
+# Keys:
+#   applicationUri    OPC UA application URI
+#   certificate       Path to client certificate (.der)
+#   privateKey        Path to client private key (.der)
+#   securityMode      None, Sign, or SignAndEncrypt
+#   securityPolicy    None, Basic256Sha256, Aes256_Sha256_RsaPss,
+#                     Aes128_Sha256_RsaOaep, or ECC_nistP256
+#   authMode          "anonymous" or "user" (read-time only)
+#   username          Username (required when authMode = user)
+#   password          Password (required when authMode = user)
+#   trustStore        Directory containing trusted certificates (.der)
+
+applicationUri = urn:bobink.ClientFindServers
+certificate = certs/ClientFindServers_cert.der
+privateKey = certs/ClientFindServers_key.der
+securityMode = SignAndEncrypt
+securityPolicy = Aes256_Sha256_RsaPss
+authMode = user
+username = user
+password = password
+trustStore = certs/trust/client