View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0008052CTT UA Binary2 - CTT Binarypublic2022-06-16 09:422025-10-30 20:28
ReporterMartin Regen Assigned ToYannik Klaass  
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Summary0008052: CTT client can not connect to device under test if server uses cert chain and sends complete chain.
Description

The ref server uses a cert chain and has
<SendCertificateChain>true</SendCertificateChain>
set in the config.

The CTT client uses a different thumbprint to connect than the leaf certificate thumbprint on the server, so the ref server bails out with 'BadsecurityChecksFailed'.

Maybe there is still some catch in the ref server cert chain handling, it has not been widely used.

Steps To Reproduce

Start ref server from https://github.com/OPCFoundation/UA-.NETStandard/tree/master/Applications/ConsoleReferenceServer.
Update server certificate with a chained application cert, e.g. by using server push.
Change config setting to set:
<SendCertificateChain>true</SendCertificateChain>

CTT client fails to connect.

TagsNo tags attached.
Files Affected

Relationships

related to 0010369 resolvedYannik Klaass CTT UA Scripts Adding CTT settings for issuer list location 

Activities

Yannik Klaass

2025-10-30 20:28

developer   ~0023487

  • Adding function to resolve certificate chains and modifying GetEndpoints and CreateSession services to use it if needed
  • Adding support of IssuerCertificateListLocation and RevokedIssuerCertificateListLocation to the CTT along with new global setting '/Advanced/Certificates/IssuerCertificateListLocation'

Issue History

Date Modified Username Field Change
2022-06-16 09:42 Martin Regen New Issue
2022-08-04 15:06 Paul Hunkar Assigned To => Alexander Allmendinger
2022-08-04 15:06 Paul Hunkar Status new => assigned
2022-08-29 18:29 Paul Hunkar Category 5 - General Problem => 2 - CTT Binary
2025-06-13 15:43 Yannik Klaass Assigned To Alexander Allmendinger => Yannik Klaass
2025-08-01 11:42 Yannik Klaass Relationship added related to 0010369
2025-08-01 15:32 Sebastian Allmendinger Project Compliance Test Tool (CTT) Unified Architecture => CTT UA Binary
2025-10-30 20:28 Yannik Klaass Status assigned => resolved
2025-10-30 20:28 Yannik Klaass Resolution open => fixed
2025-10-30 20:28 Yannik Klaass Note Added: 0023487