New security policy #1025
-
|
Hi, I am wondering if it possible to add a new security policy. "Aes128-Sha256-RsaOaep" |
Beta Was this translation helpful? Give feedback.
Replies: 7 comments 13 replies
-
|
sure OPC UA Spec. expects that algorithm expire after some time and should be replaced! would look similar to: but with: |
Beta Was this translation helpful? Give feedback.
-
|
So I can add it? Spec says no published end date. |
Beta Was this translation helpful? Give feedback.
-
|
send a merge request |
Beta Was this translation helpful? Give feedback.
-
Beta Was this translation helpful? Give feedback.
-
|
Hello, Also whether the client code (with Username & Password authentication) will be suitable to connect any other 3rd party OPC UA Server, which is already being secured with Username and Password ? |
Beta Was this translation helpful? Give feedback.
-
|
@dibyendumca currently we dont have an example... but this is the way to setup the server: simplified not for production use!!! #...
users_db = {
'user1': 'pw1'
}
def user_manager(isession, username, password):
isession.user = UserManager.User
return username in users_db and password == users_db[username]
#...
policyIDs = ["Username"]
server.set_security_IDs(policyIDs)
server.user_manager.set_user_manager(user_manager)
#... |
Beta Was this translation helpful? Give feedback.
-
|
client: client.set_user("user1")
client.set_password("pw1") |
Beta Was this translation helpful? Give feedback.
-
|
Hello @AndreasHeine, client.set_user("user1") Will the above client code work for any 3rd party OPC UA Server connection? |
Beta Was this translation helpful? Give feedback.
-
|
for all opc ua servers which implement username/password authentication! |
Beta Was this translation helpful? Give feedback.
-
|
Hello @AndreasHeine, I have added the Code below in my Server Component... When I execute the server component, I get the following error........ |
Beta Was this translation helpful? Give feedback.
-
|
oh... haven't realised that API-Change! sorry... opcua-asyncio/asyncua/server/server.py Line 83 in f49068a you need to give the manager as parameter the constructor of the server class server = Server(user_manager=user_manager) |
Beta Was this translation helpful? Give feedback.
-
|
Hello @AndreasHeine, I added the following code in my Server component... NOW MY CLIENT COMPONENT IS AS FOLLOWS ... WHEN I TRY TO EXECUTE THE CLIENT COMPONENT, I GET THE FOLLOWING ERROR... I am here 1 COULD YOU PLEASE HELP ?? |
Beta Was this translation helpful? Give feedback.
-
|
The client log doesn't help, the server has an exception. So for diagnostics you have to look at the server log. |
Beta Was this translation helpful? Give feedback.
-
|
another API change i havent noticed that... the usermanager class has changed |
Beta Was this translation helpful? Give feedback.
-
|
@dibyendumca here is a working example: import asyncio
import logging
from datetime import datetime
from asyncua import Server, ua
from asyncua.server.user_managers import UserManager
from asyncua.server.users import UserRole, User
users_db = {
'user1': 'pw1'
}
class my_user_manager():
def get_user(self, username=None, password=None, certificate=None):
if username in users_db and password == users_db[username]:
# valid user
return User(role=UserRole.Admin)
else:
# invalid user
return
logging.basicConfig(level=logging.WARNING)
_logger = logging.getLogger('asyncua')
async def main():
# Serversetup
server = Server(user_manager=my_user_manager)
server.name = "OPC UA Tutorial Server"
await server.init()
server.set_endpoint("opc.tcp://127.0.0.1:4840")
async with server:
while 1:
await asyncio.sleep(1)
if __name__ == "__main__":
asyncio.run(main()) |
Beta Was this translation helpful? Give feedback.
-
|
Hello @AndreasHeine , I implemented your way. |
Beta Was this translation helpful? Give feedback.
-
|
Hello @schroeder OK, SO I ALSO SEND THE ERROR LOGS FROM THE SERVER COMPONENT AS FOLLOWS... 18-10-2022 11:18:49.684324 >> I: 40 362 44 18-10-2022 11:18:49.684324 0 0
|
Beta Was this translation helpful? Give feedback.
-
|
Hello, MY SERVER COMPONENT HAVE THE FOLLOWING CODE SNIPPETS... AFTER RUNNING THE SERVER COMPONENT, I NOTICED THE TIME BEING UPDATED IN THOSE NODE SPECIFIED.
I HAVE THE FOLLOWING CODE SNIPPET IN MY CLIENT COMPONET... NOW MY QUESTION IS WHY STILL I GET THE UTC TIME, IN THE EVENT NOTIFICATION FUNCTION AS SHOWN BELOW. Event: Event(["EventId:b'1b177f41595e4383bf021882771b456a'", 'EventType:NodeId(Identifier=2041, NamespaceIndex=0, NodeIdType=<NodeIdType.FourByte: 1>)', 'SourceNode:NodeId(Identifier=2253, NamespaceIndex=0, NodeIdType=<NodeIdType.FourByte: 1>)', 'SourceName:Server', 'Time:2022-10-20 08:57:36.532349', 'ReceiveTime:2022-10-20 08:57:36.532349', 'LocalTime:TimeZoneDataType(Offset=330, DaylightSavingInOffset=True)', "Message:LocalizedText(Locale=None, Text='Server Event Message 763')", 'Severity:1']) |
Beta Was this translation helpful? Give feedback.
-
|
@dibyendumca that does not have any relation to the initial topic! |
Beta Was this translation helpful? Give feedback.
-
|
OK, Sorry, thanks |
Beta Was this translation helpful? Give feedback.
sure OPC UA Spec. expects that algorithm expire after some time and should be replaced!
see:
https://reference.opcfoundation.org/v104/Core/docs/Part7/6.6.164/
would look similar to:
https://github.com/FreeOpcUa/opcua-asyncio/blob/master/asyncua/crypto/security_policies.py#L608
but with: