View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
000197110000-004: Servicespublic2012-04-03 05:022012-07-16 17:20
ReporterPaul Hunkar Assigned ToMatthias Damm  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Fixed in Version1.02 
Summary0001971: Open Secure Channel policy None
Description

in Table 7 - Open Secure Channel - It states "the Client shall not send an application instance certificate and the Server shall not verify the application instance certificate" if the security policy is none. This is a breaking change since currently clients send an application instance certificate. It also does not match what is said 5.4.3.1

I believe the text should be what is stated in 5.4.3.1 That it is not required to send.

Also the same issue with Table 11

TagsNo tags attached.
Commit Version
Fix Due Date

Relationships

related to 0001498 closedMatthias Damm 10000-004: Services Need to Clarify Behavoir fr No Security 

Activities

Jim Luth

2012-04-03 17:27

administrator   ~0003463

Discussed in telecon. Agreed the text should be what is stated in 5.4.3.1

Matthias Damm

2012-04-10 12:09

developer   ~0003490

Need to be discussed at F2F

See closed related mantis issue

There is a difference between 5.4.3.1 and OpenSecureChannel. Providing a server certificate in a EndpointDescription does not hurt.

But handling a certificate in OpenSecureChannel the wrong way creates connection establishment problems.

Matthias Damm

2012-04-10 22:48

developer   ~0003506

Updated
5.4.3 GetEndpoints -> Description
Table 7 – OpenSecureChannel Service Parameters
Table 11 – CreateSession Service Parameters
to be consistent to following text:
"If the securityPolicyUri is None, the Client shall not send an ApplicationInstanceCertificate and the Server shall ignore the ApplicationInstanceCertificate."

Changed in document "OPC UA Part 4 - Services RC 1.02.15 Specification.doc"

Jim Luth

2012-04-10 22:50

administrator   ~0003507

Agreed to changes in Foxboro meeting.

Issue History

Date Modified Username Field Change
2012-04-03 05:02 Paul Hunkar New Issue
2012-04-03 17:27 Jim Luth Note Added: 0003463
2012-04-03 17:27 Jim Luth Status new => assigned
2012-04-03 17:27 Jim Luth Assigned To => Matthias Damm
2012-04-10 12:02 Matthias Damm Relationship added related to 0001498
2012-04-10 12:09 Matthias Damm Note Added: 0003490
2012-04-10 12:09 Matthias Damm Status assigned => acknowledged
2012-04-10 22:42 Jim Luth Issue cloned: 0001994
2012-04-10 22:43 Jim Luth Issue cloned: 0001995
2012-04-10 22:48 Matthias Damm Status acknowledged => resolved
2012-04-10 22:48 Matthias Damm Resolution open => fixed
2012-04-10 22:48 Matthias Damm Note Added: 0003506
2012-04-10 22:50 Jim Luth Status resolved => closed
2012-04-10 22:50 Jim Luth Note Added: 0003507
2012-04-10 22:50 Jim Luth Fixed in Version => 1.02
2012-07-16 17:20 user319 Issue cloned: 0002119