05/12/2021
Hi,
I am developing an OPC UA client and observed that multiple servers that I try to connect to are configured with endpoints having a hostname different from the hostname in the discovery URL.
This often leads to connection or timeout errors.
Is it advisable for clients to replace hostnames in the endpoint URLs returned by the server, with the hostname that was used in the “findServer” service to get discovery URL?
Are there any other things to consider if the client decides to replace the hostnames in endpoint URL?
05/30/2017
There are many legitimate cases where the Server does not know the URL the client used to access it (i.e. via a NAT firewall).
Clients may replace the domain and port in any URL return in getEndpoints.
That said, this will likely lead to a domain mismatch on the certificate which IS a security risk.
This is why it is recommended that servers include all domains that can be used to access them.
1 Guest(s)