ApplicationUri handling for Clients and Server certificates|OPC UA Implementation: Stacks, Tools, and Samples|Forum|OPC Foundation

Avatar
Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
Lost password?
sp_Feed sp_PrintTopic sp_TopicIcon
ApplicationUri handling for Clients and Server certificates
Avatar
Patrick Berger
Member
Members
Forum Posts: 4
Member Since:
02/22/2022
sp_UserOfflineSmall Offline
1
01/09/2024 - 06:57
sp_Permalink sp_Print

Hello everyone

I am not sure if I have understood the requirements and documentation correctly: Does each running application instance for a server and a client need a unique application URI, regardless of whether they are running on the same hardware or not?

https://forum.prosysopc.com/fo.....-handling/
This discussion refers to server instances. Here I agree that each server-instance on the same hardware (or network) should have a unique URI so that clients can identify those servers.

Does this also apply to clients? For example, if I launch UaExpert 3 times on my notebook, should each of these instances use its own URI and thus have its own certificate? Or is 1 application certificate sufficient here?

Thank you and best regards

Patrick

Avatar
Randy Armstrong
Admin
Forum Posts: 1564
Member Since:
05/30/2017
sp_UserOfflineSmall Offline
2
01/10/2024 - 01:03
sp_Permalink sp_Print

Each unique application installation needs a URI.

It is up to the product developer to decide where the boundary between applications installations is.

If an application is both a client and server then it should have the same URI for both.

Multiple running copies of the same application on the same machine could have the same URI.

The URI is assigned based on "installations" not "processes".

When it comes to servers you need a new URI if the address space is different.

i.e. if multiple endpoints on a host have the same URI (the client can't tell that there are multiple processes - only the URI allows it to know that 2 endpoints are for the same server) the client is allowed to assume that a Node found on one endpoint is the same as the Node on the other endpoint. If they are different because each process was launched with a different configuration then each process would need to have its own URI and its own Certificates.

Forum Timezone: America/Phoenix
Most Users Ever Online: 510
Currently Online: Kengo Iwamoto
Guest(s) 63
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Forum Stats:
Groups: 2
Forums: 10
Topics: 1435
Posts: 4855