From deaabd1464784a6fddbfa9e1ac6cb0e1148a8c34 Mon Sep 17 00:00:00 2001 From: Thomas Vanbesien Date: Wed, 18 Feb 2026 21:44:17 +0100 Subject: Add X509 certificate identity token authentication Support authMode=cert alongside anonymous and user. The client reuses its application certificate as the X509 identity token (open62541 requires both to match). Server-side access control advertises the certificate token policy automatically when sessionPKI is configured. --- tests/secure_cert/server_register.conf | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 tests/secure_cert/server_register.conf (limited to 'tests/secure_cert/server_register.conf') diff --git a/tests/secure_cert/server_register.conf b/tests/secure_cert/server_register.conf new file mode 100644 index 0000000..ba6de55 --- /dev/null +++ b/tests/secure_cert/server_register.conf @@ -0,0 +1,13 @@ +# ServerRegister server config — test: secure_cert +# Requires X509 certificate identity token for session auth. + +port = 14841 +applicationUri = urn:localhost:bobink:ServerRegister + +certificate = certs/ServerRegister_cert.der +privateKey = certs/ServerRegister_key.der +trustStore = certs/trust/server_register + +authMode = cert + +registerInterval = 10 -- cgit v1.2.3