Server nonce validation|OPC UA Standard|Forum|OPC Foundation

Avatar
Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
Lost password?
sp_Feed sp_PrintTopic sp_TopicIcon
Server nonce validation
Avatar
Francesco Valletti
New Member
Members
Forum Posts: 2
Member Since:
03/23/2022
sp_UserOfflineSmall Offline
1
03/23/2022 - 10:15
sp_Permalink sp_Print sp_EditHistory

Hi!
I would like to ask if by chance someone has already encountered errors during the validation of the nonce server when opening a client connection.

specifically I am struggling with this error:

[18:10:04 INF] Initializing driver...
[18:10:23 INF] POLICY ID:UserName
[18:10:23 INF] POLICY URIhttps://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15
[18:10:23 ERR] OPC UA (opc.tcp://localhost:59611) - Opc.Ua.ServiceResultException: Server nonce is not the correct length or not random enough. at Opc.Ua.Client.Session.ValidateServerNonce(IUserIdentity identity, Byte[] serverNonce, String securityPolicyUri, Byte[] previousServerNonce) at Opc.Ua.Client.Session.Open(String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, Boolean checkDomain) at Opc.Ua.Client.Session.Create(ApplicationConfiguration configuration, ITransportWaitingConnection connection, ConfiguredEndpoint endpoint, Boolean updateBeforeConnect, Boolean checkDomain, String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales)

just with one opcua server.

can someone give me a little help?

thank you!

Avatar
Martin Regen
New Member
Members
Forum Posts: 1
Member Since:
11/18/2015
sp_UserOfflineSmall Offline
2
04/01/2022 - 06:22
sp_Permalink sp_Print sp_EditHistory

Hi, the client looks like the .NET Standard library. There is an option to suppress the error by adding:

<SuppressNonceValidationErrors>

to the security configuration.

However, due to the nature of the issue, which means in the worst case the password is transmitted as clear text because the server provides a nonce with all zeroes, suppressing this error is not recommended.

Avatar
Francesco Valletti
New Member
Members
Forum Posts: 2
Member Since:
03/23/2022
sp_UserOfflineSmall Offline
3
04/04/2022 - 07:49
sp_Permalink sp_Print

Thank you!

Forum Timezone: America/Phoenix
Most Users Ever Online: 510
Currently Online:
Guest(s) 19
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Forum Stats:
Groups: 2
Forums: 10
Topics: 1354
Posts: 4583