Lost password?
sp_Search
Advanced Search
Advanced Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
sp_Search

Please confirm you want to mark all posts read

Mark all topics read

sp_MobileMenu Actions
Avatar

New/Updated Topics

Select Forum

sp_TopicIcon
Usage of Insucure cryptographic algorithms in opc-ua-stack-1.4.1-224.jar
sp_Feed
Avatar
Sasidhar Grandhe
Posts: 4
08/19/2019 - 22:55

1

Some of the functions in opc-ua-stack-1.4.1-224.jar has usage of MD5 and SHA1 algorithms which are no longer considered sufficiently secure. We are using IBM App scan security tool to scan our product which results high severity issues with these algorithms.

Avatar
Randy Armstrong
Posts: 1580
08/20/2019 - 16:14

2

Where did you get that file from?

Avatar
Sasidhar Grandhe
Posts: 4
08/20/2019 - 22:45

3

We got that jar file from GitHub, here is the link

https://github.com/OPCFoundati…..y/releases

Thanks.

Avatar
Randy Armstrong
Posts: 1580
08/21/2019 - 10:36

4

I have updated the documentation to indicate that they should not be used.

I will check to see if they should be pulled down entirely.

If you are looking for Java support I suggest:

https://github.com/eclipse/milo

or

https://www.prosysopc.com/prod…..-java-sdk/

Forum Timezone:
America/Phoenix
Most Users Ever Online: 510
Currently Online:
Guest(s) 33

Devices in use: Phone (5), Desktop (28)

Forum Stats:
Groups: 2
Forums: 10
Topics: 1448
Posts: 4893