Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [milo-dev] Connection Error to remote OPC UA Server

Flavio,

It's hard to tell without a little more detail of the error messages and logs, but it seems that the server thinks the client certificate has been revoked (or is using that StatusCode incorrectly).

On Wed, Mar 23, 2022 at 3:40 AM Flavio Freuler <flavio.freuler@xxxxxx> wrote:
Hello 

I'm working on a project with Eclipse Milo. When I try to connect to the remote OPC UA Server with the UaExpert Client I get two Messages (one Info, one Error): 
  • Info: "The hostname of the discovery URL used to call GetEndpoints (Servername) was replaced by the hostname used to call FindServers (IP-Adress). Do you want to replace the hostnames of the EndpointURLs with this hostname?" -> I select yes
  • Connect to Server with Security Mode Sign&Encrypt (Basic128Rsa15): Connect Error: "Error "BadcertificateHostNameInvalid" was returned during CreateSession, press 'Ignore' to suppress the error and continue connecting" -> I select Ignore and the connection works. 
Now I want to make the same connection from my Java application with Eclipse Milo SDK. When I try to connect the first time I get the Error from my Client "UaException: status=Bad_CertificateInvalid, message=The certificate provided as a parameter is not valid." In the server log I see the following: "verify error: num=18:self signed certificate depth=0", "UaServer_EndpointCallback: SecureChannel 0 open failed! [status=0x80120000]", "[uastack] OpcUa_SecureListener_Processrequest: Closing Channel due error 0x80120000]!". 

My client cerificate is now in the rejected folder from the pki of the server. If I move it to the trusted folder and try to connect again I get the following: 
  • Milo-Client: "UaException: status=Bad_CertificateRevoked, message=The certificate has been revoked."
  • Server-Log: "OpcUa_SecureListener_ProcessRequest: Closing Channel due error 0x801D0000!"
What I have noticed is that in the Server-Log the time for the logs is an hour to early. Like it should be 11:30 am and in the log is 10:30 am. The Time of the server computer is right but it seems the time from the OPC UA Server is false. This could be a problem with the certificates when the times differ, but it's strange that it still works with the UaExpert Client. 

Do you have any idea what could be the problem for this connection issue? 

Thank you and best regards!






_______________________________________________
milo-dev mailing list
milo-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/milo-dev

Back to the top