From e4ba24b3d24fdce36bc9dbd3c2c8f00b0ec23335 Mon Sep 17 00:00:00 2001
From: Thomas Vanbesien <tvanbesi@proton.me>
Date: Tue, 17 Feb 2026 16:23:47 +0100
Subject: Use Aes256_Sha256_RsaPss as default security policy

---
 config/client_find_servers.conf | 4 ++--
 config/server_register.conf     | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

(limited to 'config')

diff --git a/config/client_find_servers.conf b/config/client_find_servers.conf
index bc16b18..5ab15d5 100644
--- a/config/client_find_servers.conf
+++ b/config/client_find_servers.conf
@@ -33,7 +33,7 @@ applicationUri = urn:bobink.ClientFindServers
 discoveryCertificate = certs/ClientFindServers_cert.der
 discoveryPrivateKey = certs/ClientFindServers_key.der
 discoverySecurityMode = SignAndEncrypt
-discoverySecurityPolicy = Aes128_Sha256_RsaOaep
+discoverySecurityPolicy = Aes256_Sha256_RsaPss
 discoveryAuthMode = user
 discoveryUsername = user
 discoveryPassword = password
@@ -43,7 +43,7 @@ discoveryTrustList = certs/ServerLDS_cert.der
 serverCertificate = certs/ClientFindServers_cert.der
 serverPrivateKey = certs/ClientFindServers_key.der
 serverSecurityMode = SignAndEncrypt
-serverSecurityPolicy = Aes128_Sha256_RsaOaep
+serverSecurityPolicy = Aes256_Sha256_RsaPss
 serverAuthMode = user
 serverUsername = user
 serverPassword = password
diff --git a/config/server_register.conf b/config/server_register.conf
index 3c905a5..c32c61e 100644
--- a/config/server_register.conf
+++ b/config/server_register.conf
@@ -33,7 +33,7 @@ discoveryEndpoint = opc.tcp://localhost:4840
 registerInterval = 10
 
 securityMode = SignAndEncrypt
-securityPolicy = Aes128_Sha256_RsaOaep
+securityPolicy = Aes256_Sha256_RsaPss
 
 serverAuthMode = user
 serverUsername = user
-- 
cgit v1.2.3