Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[milo-dev] Connection Error to remote OPC UA Server
  • From: Flavio Freuler <flavio.freuler@xxxxxx>
  • Date: Wed, 23 Mar 2022 10:40:18 +0000
  • Accept-language: de-CH, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ost.ch; dmarc=pass action=none header.from=ost.ch; dkim=pass header.d=ost.ch; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=eprz00r2hR1nL4oPds1uxBZdqtENLUvCDpKNigkzL90=; b=IsYNjNXRKqwM+rVYG3+ZJL7P+2YjCodUFnutg+c1JjEIcbtd2HmXrmuZsmXQf+sxGhrWqVev6zOUBH0Mk3SPo5DSLYuT2537NFhTbtQr7l5U+bRZJAcjCltz+dRSZoLIR7EbD0808354uWcxiat2Nj701xX7t91ZEiwSFrZLklo5wejzJriCBzKysIrdqbJuIzR7O9u633iNJkTpQ55CWCe/jMKO9wM/vuZ0dO0VcLoPlh1d+h7Fd1IhfzosMFc7laezTWpWqC+2kxyRdxId63XIKd5sqeSl95C/TS+YOzz0vvtQZ01z7KySxPCzvks4PnDx8DI00PWcxuwmhVidIQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IegIMEqLb6cTMRSqtit2poxW4zLe8JKpIpOBGjtpskPmxbqkFOvukhLXitAxt13vS+EO3OW+zI01p+uD3eBmV1apT7vnKx6JdUC6gvlUjKIfgTxZ/Lqv8AP22//heoAOYtqlrHc9SCWvvstI+bMQso3DPmf8P37IjGV7flEmGZlUZr3tRyialnUKu/ysa/OaKovNrMKtyLl1DizmTdlrZvQAZAgrQh8ucITnGCnQg4rPdhHibAMZmg0jwutTmNqwFutB6pyW/t+s5VU12yM2dA0HmXg0RtU3nPSiKxA7hmF50pGrSKYTIEiGAo5cLyixF/QrP5qDfKBnf7X1fAJpOA==
  • Delivered-to: milo-dev@xxxxxxxxxxx
  • List-archive: <https://www.eclipse.org/mailman/private/milo-dev/>
  • List-help: <mailto:milo-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/milo-dev>, <mailto:milo-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/milo-dev>, <mailto:milo-dev-request@eclipse.org?subject=unsubscribe>
  • Suggested_attachment_session_id: f3499fe2-a3c1-fd84-af0e-8aba690eff21
  • Thread-index: AQHYPp7b9y1XOObh4km/7FA2xCjNsA==
  • Thread-topic: Connection Error to remote OPC UA Server
Hello 

I'm working on a project with Eclipse Milo. When I try to connect to the remote OPC UA Server with the UaExpert Client I get two Messages (one Info, one Error): 
  • Info: "The hostname of the discovery URL used to call GetEndpoints (Servername) was replaced by the hostname used to call FindServers (IP-Adress). Do you want to replace the hostnames of the EndpointURLs with this hostname?" -> I select yes
  • Connect to Server with Security Mode Sign&Encrypt (Basic128Rsa15): Connect Error: "Error "BadcertificateHostNameInvalid" was returned during CreateSession, press 'Ignore' to suppress the error and continue connecting" -> I select Ignore and the connection works. 
Now I want to make the same connection from my Java application with Eclipse Milo SDK. When I try to connect the first time I get the Error from my Client "UaException: status=Bad_CertificateInvalid, message=The certificate provided as a parameter is not valid." In the server log I see the following: "verify error: num=18:self signed certificate depth=0", "UaServer_EndpointCallback: SecureChannel 0 open failed! [status=0x80120000]", "[uastack] OpcUa_SecureListener_Processrequest: Closing Channel due error 0x80120000]!". 

My client cerificate is now in the rejected folder from the pki of the server. If I move it to the trusted folder and try to connect again I get the following: 
  • Milo-Client: "UaException: status=Bad_CertificateRevoked, message=The certificate has been revoked."
  • Server-Log: "OpcUa_SecureListener_ProcessRequest: Closing Channel due error 0x801D0000!"
What I have noticed is that in the Server-Log the time for the logs is an hour to early. Like it should be 11:30 am and in the log is 10:30 am. The Time of the server computer is right but it seems the time from the OPC UA Server is false. This could be a problem with the certificates when the times differ, but it's strange that it still works with the UaExpert Client. 

Do you have any idea what could be the problem for this connection issue? 

Thank you and best regards!






Back to the top