6.7 Re-establishing connections

Replaced:
Re-establishing the connection by creating a new SecureChannel may be rejected, because of a new Server Application Instance Certificate or other security errors. In case of security failures, the Client shall use the GetEndpoints Service to fetch the most up to date security information from the Server
With:
Re-establishing the connection by creating a new SecureChannel may be rejected, because of a new Server Application Instance Certificate or other security errors. OpenSecureChannel returns Bad_CertificateInvalid in the case of a new Server Application Instance Certificate. In case of security failures, the Client shall use the GetEndpoints Service to fetch the most up to date security information from the Server.
If the Client Application Instance Certificate is updated, the Client must create a new Session since the Session does not allow a update of the Client Application Instance Certificate. The Client shall try to transfer existing Subscriptions to the new Session. Transfer subscription must be accepted by a Server even for Anonymous user if the Client does not change i.e. the ApplicationUri of the Client does not change.

Updated in OPC 10000-4 - UA Specification Part 4 - Services 1.05.0 Draft11.docx

This will need to be split to client and server side and possibly new testcase and scripts depending on how many issue we want to create

We need to add a test cases for the client changing the certificate it is using (with the transfer) , we also need to investigate what other test cases we need to add (client side and Server side) - issue might be further split