Apply security changes after trust list is modified via AddCertificate or RemoveCertificate|OPC UA Standard|Forum|OPC Foundation

Avatar
Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
Lost password?
sp_Feed sp_PrintTopic sp_TopicIcon
Apply security changes after trust list is modified via AddCertificate or RemoveCertificate
Avatar
Phuong Nguyen
Member
Members
Forum Posts: 15
Member Since:
11/22/2018
sp_UserOfflineSmall Offline
1
10/17/2022 - 07:14
sp_Permalink sp_Print

Hi,

Unlike update of trust list via its file methods such as Open, Write, and CloseAndUpdate, update of the trust list via optional methods AddCertificate or RemoveCertificate does not indicate to the user that the server shall be restarted in order for security changes to take effect.

Does this mean that after having updated the trust list the server shall restart itself automatically without informing the client? Is this behaviour somewhere specified in the specification or is it implementation specific?

See also:

Regards,

Phuong

Avatar
Randy Armstrong
Admin
Forum Posts: 1451
Member Since:
05/30/2017
sp_UserOfflineSmall Offline
2
10/17/2022 - 09:35
sp_Permalink sp_Print sp_EditHistory

The entire mechanism for managing security updates has been improved in 1.05.02 (about to be released) and it clarifies this point.

For 1.04 implementations you should not need to restart the server to apply updates to the trust list.

The restarting the server was only every intended to be used for changes to the server certificate.

Forum Timezone: America/Phoenix
Most Users Ever Online: 510
Currently Online:
Guest(s) 22
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Forum Stats:
Groups: 2
Forums: 10
Topics: 1349
Posts: 4577