From deaabd1464784a6fddbfa9e1ac6cb0e1148a8c34 Mon Sep 17 00:00:00 2001
From: Thomas Vanbesien <tvanbesi@proton.me>
Date: Wed, 18 Feb 2026 21:44:17 +0100
Subject: Add X509 certificate identity token authentication

Support authMode=cert alongside anonymous and user. The client
reuses its application certificate as the X509 identity token
(open62541 requires both to match). Server-side access control
advertises the certificate token policy automatically when
sessionPKI is configured.
---
 tests/secure_cert/server_lds.conf | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 tests/secure_cert/server_lds.conf

(limited to 'tests/secure_cert/server_lds.conf')

diff --git a/tests/secure_cert/server_lds.conf b/tests/secure_cert/server_lds.conf
new file mode 100644
index 0000000..ca1f8a6
--- /dev/null
+++ b/tests/secure_cert/server_lds.conf
@@ -0,0 +1,13 @@
+# ServerLDS — test: secure_cert
+# Secured LDS with discovery-only None endpoint.
+
+port = 14840
+applicationUri = urn:localhost:bobink:ServerLDS
+
+certificate = certs/ServerLDS_cert.der
+privateKey = certs/ServerLDS_key.der
+trustStore = certs/trust/server_lds
+
+authMode = anonymous
+
+cleanupTimeout = 60
-- 
cgit v1.2.3