KepwareEx rejects RS6 cert

[zzz]

OK, this post is the genuine server rejects rapidscada post.

====ERROR===
Opc.Ua.ServiceResultException: Error establishing a connection: Error received from remote host:
at Opc.Ua.Bindings.ChannelAsyncOperation`1.End(Int32 timeout, Boolean throwOnError)
at Opc.Ua.Bindings.UaSCUaBinaryClientChannel.EndSendRequest(IAsyncResult result)
at Opc.Ua.Bindings.UaSCUaBinaryTransportChannel.EndSendRequest(IAsyncResult result)
at Opc.Ua.Bindings.UaSCUaBinaryTransportChannel.SendRequest(IServiceRequest request)
at Opc.Ua.SessionClient.CreateSession(RequestHeader requestHeader, ApplicationDescription clientDescription, String serverUri, String endpointUrl, String sessionName, Byte[] clientNonce, Byte[] clientCertificate, Double requestedSessionTimeout, UInt32 maxResponseMessageSize, NodeId& sessionId, NodeId& authenticationToken, Double& revisedSessionTimeout, Byte[]& serverNonce, Byte[]& serverCertificate, EndpointDescriptionCollection& serverEndpoints, SignedSoftwareCertificateCollection& serverSoftwareCertificates, SignatureData& serverSignature, UInt32& maxRequestMessageSize)
at Opc.Ua.Client.Session.Open(String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, Boolean checkDomain)
at Opc.Ua.Client.Session.Create(ApplicationConfiguration configuration, ITransportWaitingConnection connection, ConfiguredEndpoint endpoint, Boolean updateBeforeConnect, Boolean checkDomain, String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales)
at Scada.Comm.Drivers.DrvOpcUa.OpcClientHelperBase.ConnectAsync()
at Scada.Comm.Drivers.DrvOpcUa.View.Forms.FrmDeviceConfig.ConnectToOpcServer()
====END OF ERROR===

In the meanwhile

Date Time Level Source Event
2024-06-01 19:50:22 Error UA Server UaServer_EndpointCallback: SecureChannel 0 open failed! [status=0x80120000]

According to this

https://github.com/OPCFoundation/UA-.NETStandard/blob/3ba3b17237ef5f9364f0fd2ed276abfac266d42c/Stack/Opc.Ua.Core/Types/Generated/Opc.Ua.StatusCodes.cs#L145
/// <summary>
/// The certificate provided as a parameter is not valid.
/// </summary>
public const uint BadCertificateInvalid = 0x80120000;

This is compatibility issue with the legacy OPC server (in this case kepwareex 5). I am giving up for this for now, it just took too much time.
Mik, if you have any fix for compatibility like this, I’d like to have a try later. I think it may be the same key length issue the other way around (no bigger than 1024bit key).

• This topic was modified 1 year, 2 months ago by zzz.
• This topic was modified 1 year, 2 months ago by zzz.

[zzz]

Delete this post thank you. It just mean, I need to trust the certificate in the server setting.

[Author]

Posts