![Avatar](https://opcfoundation.org/wp-content/uploads/sp-resources/forum-avatars/defaults/userdefault.png)
Svein Folkeson
New Member
Members
Forum Posts: 2
Member Since:
11/20/2018
11/20/2018
![sp_UserOfflineSmall](https://opcfoundation.org/wp-content/sp-resources/forum-themes/reboot/images/darkpack/sp_UserOfflineSmall.png)
I am responsible for more than 200 OPC UA Servers. My job is to keep all certificates and crl's up to date.
To handle this amount of UA Servers we are using GDS.
If a certificate expires then it is no longer possible to access the UA Server.
I have experienced that expired crls doesnt affect the access to the UA Servers. Is that as it should be?
Is the expire date on a crl just to consider as an information with no other consequences.
![Avatar](https://opcfoundation.org/wp-content/uploads/sp-resources/forum-avatars/defaults/admindefault.png)
Randy Armstrong
Admin
Forum Posts: 1537
Member Since:
05/30/2017
05/30/2017
![sp_UserOfflineSmall](https://opcfoundation.org/wp-content/sp-resources/forum-themes/reboot/images/darkpack/sp_UserOfflineSmall.png)
OPC UA applications are not required to enforce the expiry dates on CRLs so most do not.
This is not ideal but given the need to maintain copies of CRLs on every device it was something that was seen as more practical.
Once GDS are widely available and deployed the specification could look at this issue.
Forum Timezone: America/Phoenix
Most Users Ever Online: 510
Currently Online:
Guest(s) 47
Currently Browsing this Page:
1 Guest(s)
1 Guest(s)
Top Posters:
Forum Stats:
Groups: 2
Forums: 10
Topics: 1415
Posts: 4778