First of all I want to thank you for really interesting and useful software.
I have a issue with the following. I compiled the server following the tutorial from the docs. Anonymous connection works without problems, but when I generate a certificate and a key I get following warning and I can't connect to my server using client certs/keys (Sign/SignAndEncrypt). I used a Python script for certificate generation provided in the repo.
I guess it has something to do with SecurityPolicy setup, since I used the same private keys with my own OPC UA server script (asyncua for python).
x509 Certificate Authentication configured, but no encrypting SecurityPolicy. This can leak credentials on the network.
Does this mean that I have to manually configure it?
This is what I get when I run the program:
SampleServer, exit with Ctrl+C
[2024-07-05 14:31:15.127 (UTC+0200)] info/eventloop Starting the EventLoop
[2024-07-05 14:31:15.130 (UTC+0200)] warn/server AccessControl: Unconfigured AccessControl. Users have all permissions.
[2024-07-05 14:31:15.130 (UTC+0200)] info/server AccessControl: Anonymous login is enabled
[2024-07-05 14:31:15.130 (UTC+0200)] warn/server x509 Certificate Authentication configured, but no encrypting SecurityPolicy. This can leak credentials on the network.
[2024-07-05 14:31:15.241 (UTC+0200)] warn/userland ServerUrls already set. Overriding.
[2024-07-05 14:31:15.242 (UTC+0200)] info/securitypolicy The basic256sha256 security policy with openssl is added.
[2024-07-05 14:31:15.242 (UTC+0200)] info/securitypolicy The Aes256Sha256RsaPss security policy with openssl is added.
[2024-07-05 14:31:15.242 (UTC+0200)] info/securitypolicy The Aes128Sha256RsaOaep security policy with openssl is added.
[2024-07-05 14:31:15.244 (UTC+0200)] info/securitypolicy The Basic128Rsa15 security policy with openssl is added.
[2024-07-05 14:31:15.244 (UTC+0200)] info/securitypolicy The basic256 security policy with openssl is added.
[2024-07-05 14:31:15.245 (UTC+0200)] warn/server AccessControl: Unconfigured AccessControl. Users have all permissions.
[2024-07-05 14:31:15.245 (UTC+0200)] info/server AccessControl: Anonymous login is enabled
[2024-07-05 14:31:15.245 (UTC+0200)] warn/server x509 Certificate Authentication configured, but no encrypting SecurityPolicy. This can leak credentials on the network.
And, when I try to connect using my client:
[2024-07-05 15:21:45.463 (UTC+0200)] info/network TCP 536 | Connection opened from "127.0.0.1" via the server socket 548
[2024-07-05 15:21:45.463 (UTC+0200)] info/channel TCP 536 | SC 18 | SecureChannel created
[2024-07-05 15:21:45.525 (UTC+0200)] info/channel TCP 536 | SC 18 | SecureChannel opened with SecurityPolicy http://opcfoundation.org/UA/SecurityPolicy#None and a revised lifetime of 600.00s
[2024-07-05 15:21:45.534 (UTC+0200)] info/session TCP 536 | SC 18 | Session "urn:UmatiSampleServer" | Session created
[2024-07-05 15:21:45.565 (UTC+0200)] info/securitypolicy The basic256sha256 security policy channel with openssl is created.
[2024-07-05 15:21:45.567 (UTC+0200)] info/securitypolicy The basic256sha256 security policy channel with openssl is deleted.
However, I can connect with my keys if I set security policy to None in UAExpert. Like this:
![image](https://private-user-images.githubusercontent.com/59747675/346136386-9d843880-6dbe-44c3-a421-b69d35a917cf.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.bRX0MoDNL8x21W9R3hSlOzily0rqdoGdy5E_CQ_u1yg)
When I use Sign or SignAndEncrypt it does not work, and I get:
Error 'BadConfigurationError' was returned during ActivateSession