View Issue Details

IDProjectCategoryView StatusLast Update
0008550CTT UA Test Case3 - Feature Requestpublic2023-05-19 15:25
ReporterMartin Regen Assigned ToAlexander Allmendinger  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionfixed 
Fixed in Version1.03.09.501 
Summary0008550: Add test case with a certificate chain leaf that contains an Authority Information Access and AKI extension
Description

see https://github.com/OPCFoundation/UA-.NETStandard/security/advisories/GHSA-fvxf-r9fw-49pc

for sample code see
https://github.com/OPCFoundation/UA-.NETStandard/blob/6711523ffe60d6e4cda6ee190f08d53b29ca7610/Tests/Opc.Ua.Core.Tests/Security/Certificates/CertificateValidatorAlternate.cs#L231
and
https://github.com/OPCFoundation/UA-.NETStandard/blob/6711523ffe60d6e4cda6ee190f08d53b29ca7610/Tests/Opc.Ua.Core.Tests/Security/Certificates/CertificateValidatorAlternate.cs#L257

build a certificate chain with permutations of the AKI and a with the Authority information Access field which points to the local web server with the root CA.

validate:

  • the server is not trying to pull the CA certificate of the web server
  • the server does not allow to bypass the cert validation
TagsNo tags attached.
Files Affected

Activities

Alexander Allmendinger

2023-05-02 11:17

developer   ~0019260

Created a manual test case 058 in Certificate Validation CU

Paul Hunkar

2023-05-19 15:25

administrator   ~0019410

Review test agreed (it is manual) - closed issue

Issue History

Date Modified Username Field Change
2023-01-03 12:07 Martin Regen New Issue
2023-01-05 17:25 Paul Hunkar Assigned To => Alexander Allmendinger
2023-01-05 17:25 Paul Hunkar Status new => assigned
2023-05-02 11:17 Alexander Allmendinger Status assigned => resolved
2023-05-02 11:17 Alexander Allmendinger Resolution open => fixed
2023-05-02 11:17 Alexander Allmendinger Note Added: 0019260
2023-05-19 15:25 Paul Hunkar Status resolved => closed
2023-05-19 15:25 Paul Hunkar Fixed in Version => 1.03.09.501
2023-05-19 15:25 Paul Hunkar Note Added: 0019410