From deaabd1464784a6fddbfa9e1ac6cb0e1148a8c34 Mon Sep 17 00:00:00 2001 From: Thomas Vanbesien Date: Wed, 18 Feb 2026 21:44:17 +0100 Subject: Add X509 certificate identity token authentication Support authMode=cert alongside anonymous and user. The client reuses its application certificate as the X509 identity token (open62541 requires both to match). Server-side access control advertises the certificate token policy automatically when sessionPKI is configured. --- tests/secure_cert/client.conf | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 tests/secure_cert/client.conf (limited to 'tests/secure_cert/client.conf') diff --git a/tests/secure_cert/client.conf b/tests/secure_cert/client.conf new file mode 100644 index 0000000..0abd582 --- /dev/null +++ b/tests/secure_cert/client.conf @@ -0,0 +1,13 @@ +# Client — test: secure_cert +# Authenticates to ServerRegister with X509 certificate identity token. + +applicationUri = urn:localhost:bobink:Client + +certificate = certs/Client_cert.der +privateKey = certs/Client_key.der +trustStore = certs/trust/client + +securityMode = SignAndEncrypt +securityPolicy = Basic256Sha256 + +authMode = cert -- cgit v1.2.3