ua_config_default.c 29 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752
  1. /* This work is licensed under a Creative Commons CCZero 1.0 Universal License.
  2. * See http://creativecommons.org/publicdomain/zero/1.0/ for more information.
  3. *
  4. * Copyright 2017 (c) Fraunhofer IOSB (Author: Julius Pfrommer)
  5. * Copyright 2017 (c) Julian Grothoff
  6. * Copyright 2017-2018 (c) Mark Giraud, Fraunhofer IOSB
  7. * Copyright 2017 (c) Stefan Profanter, fortiss GmbH
  8. * Copyright 2017 (c) Thomas Stalder, Blue Time Concept SA
  9. * Copyright 2018 (c) Daniel Feist, Precitec GmbH & Co. KG
  10. * Copyright 2018 (c) Fabian Arndt, Root-Core
  11. * Copyright 2019 (c) Kalycito Infotech Private Limited
  12. */
  13. #include <open62541/client_config_default.h>
  14. #include <open62541/network_tcp.h>
  15. #ifdef UA_ENABLE_WEBSOCKET_SERVER
  16. #include <open62541/network_ws.h>
  17. #endif
  18. #include <open62541/plugin/accesscontrol_default.h>
  19. #include <open62541/plugin/log_stdout.h>
  20. #include <open62541/plugin/pki_default.h>
  21. #include <open62541/plugin/securitypolicy_default.h>
  22. #include <open62541/server_config_default.h>
  23. /* Struct initialization works across ANSI C/C99/C++ if it is done when the
  24. * variable is first declared. Assigning values to existing structs is
  25. * heterogeneous across the three. */
  26. static UA_INLINE UA_UInt32Range
  27. UA_UINT32RANGE(UA_UInt32 min, UA_UInt32 max) {
  28. UA_UInt32Range range = {min, max};
  29. return range;
  30. }
  31. static UA_INLINE UA_DurationRange
  32. UA_DURATIONRANGE(UA_Duration min, UA_Duration max) {
  33. UA_DurationRange range = {min, max};
  34. return range;
  35. }
  36. /*******************************/
  37. /* Default Connection Settings */
  38. /*******************************/
  39. const UA_ConnectionConfig UA_ConnectionConfig_default = {
  40. 0, /* .protocolVersion */
  41. 65535, /* .sendBufferSize, 64k per chunk */
  42. 65535, /* .recvBufferSize, 64k per chunk */
  43. 0, /* .maxMessageSize, 0 -> unlimited */
  44. 0 /* .maxChunkCount, 0 -> unlimited */
  45. };
  46. /***************************/
  47. /* Default Server Settings */
  48. /***************************/
  49. #define MANUFACTURER_NAME "open62541"
  50. #define PRODUCT_NAME "open62541 OPC UA Server"
  51. #define PRODUCT_URI "http://open62541.org"
  52. #define APPLICATION_NAME "open62541-based OPC UA Application"
  53. #define APPLICATION_URI "urn:unconfigured:application"
  54. #define APPLICATION_URI_SERVER "urn:open62541.server.application"
  55. #define STRINGIFY(arg) #arg
  56. #define VERSION(MAJOR, MINOR, PATCH, LABEL) \
  57. STRINGIFY(MAJOR) "." STRINGIFY(MINOR) "." STRINGIFY(PATCH) LABEL
  58. static UA_StatusCode
  59. createEndpoint(UA_ServerConfig *conf, UA_EndpointDescription *endpoint,
  60. const UA_SecurityPolicy *securityPolicy,
  61. UA_MessageSecurityMode securityMode) {
  62. UA_EndpointDescription_init(endpoint);
  63. endpoint->securityMode = securityMode;
  64. UA_String_copy(&securityPolicy->policyUri, &endpoint->securityPolicyUri);
  65. endpoint->transportProfileUri =
  66. UA_STRING_ALLOC("http://opcfoundation.org/UA-Profile/Transport/uatcp-uasc-uabinary");
  67. /* Add security level value for the corresponding message security mode */
  68. endpoint->securityLevel = (UA_Byte) securityMode;
  69. /* Enable all login mechanisms from the access control plugin */
  70. UA_StatusCode retval = UA_Array_copy(conf->accessControl.userTokenPolicies,
  71. conf->accessControl.userTokenPoliciesSize,
  72. (void **)&endpoint->userIdentityTokens,
  73. &UA_TYPES[UA_TYPES_USERTOKENPOLICY]);
  74. if(retval != UA_STATUSCODE_GOOD)
  75. return retval;
  76. endpoint->userIdentityTokensSize = conf->accessControl.userTokenPoliciesSize;
  77. UA_String_copy(&securityPolicy->localCertificate, &endpoint->serverCertificate);
  78. UA_ApplicationDescription_copy(&conf->applicationDescription, &endpoint->server);
  79. return UA_STATUSCODE_GOOD;
  80. }
  81. static const size_t usernamePasswordsSize = 2;
  82. static UA_UsernamePasswordLogin usernamePasswords[2] = {
  83. {UA_STRING_STATIC("user1"), UA_STRING_STATIC("password")},
  84. {UA_STRING_STATIC("user2"), UA_STRING_STATIC("password1")}};
  85. static UA_StatusCode
  86. setDefaultConfig(UA_ServerConfig *conf) {
  87. if (!conf)
  88. return UA_STATUSCODE_BADINVALIDARGUMENT;
  89. /* Zero out.. All members have a valid initial value */
  90. UA_ServerConfig_clean(conf);
  91. memset(conf, 0, sizeof(UA_ServerConfig));
  92. /* --> Start setting the default static config <-- */
  93. conf->nThreads = 1;
  94. conf->logger = UA_Log_Stdout_;
  95. conf->shutdownDelay = 0.0;
  96. /* Server Description */
  97. conf->buildInfo.productUri = UA_STRING_ALLOC(PRODUCT_URI);
  98. conf->buildInfo.manufacturerName = UA_STRING_ALLOC(MANUFACTURER_NAME);
  99. conf->buildInfo.productName = UA_STRING_ALLOC(PRODUCT_NAME);
  100. conf->buildInfo.softwareVersion =
  101. UA_STRING_ALLOC(VERSION(UA_OPEN62541_VER_MAJOR, UA_OPEN62541_VER_MINOR,
  102. UA_OPEN62541_VER_PATCH, UA_OPEN62541_VER_LABEL));
  103. #ifdef UA_PACK_DEBIAN
  104. conf->buildInfo.buildNumber = UA_STRING_ALLOC("deb");
  105. #else
  106. conf->buildInfo.buildNumber = UA_STRING_ALLOC(__DATE__ " " __TIME__);
  107. #endif
  108. conf->buildInfo.buildDate = UA_DateTime_now();
  109. conf->applicationDescription.applicationUri = UA_STRING_ALLOC(APPLICATION_URI_SERVER);
  110. conf->applicationDescription.productUri = UA_STRING_ALLOC(PRODUCT_URI);
  111. conf->applicationDescription.applicationName =
  112. UA_LOCALIZEDTEXT_ALLOC("en", APPLICATION_NAME);
  113. conf->applicationDescription.applicationType = UA_APPLICATIONTYPE_SERVER;
  114. /* conf->applicationDescription.gatewayServerUri = UA_STRING_NULL; */
  115. /* conf->applicationDescription.discoveryProfileUri = UA_STRING_NULL; */
  116. /* conf->applicationDescription.discoveryUrlsSize = 0; */
  117. /* conf->applicationDescription.discoveryUrls = NULL; */
  118. #ifdef UA_ENABLE_DISCOVERY_MULTICAST
  119. UA_MdnsDiscoveryConfiguration_init(&conf->discovery.mdns);
  120. conf->discovery.mdnsInterfaceIP = UA_STRING_NULL;
  121. #endif
  122. /* Custom DataTypes */
  123. /* conf->customDataTypesSize = 0; */
  124. /* conf->customDataTypes = NULL; */
  125. /* Networking */
  126. /* conf->networkLayersSize = 0; */
  127. /* conf->networkLayers = NULL; */
  128. /* conf->customHostname = UA_STRING_NULL; */
  129. /* Endpoints */
  130. /* conf->endpoints = {0, NULL}; */
  131. /* Certificate Verification that accepts every certificate. Can be
  132. * overwritten when the policy is specialized. */
  133. UA_CertificateVerification_AcceptAll(&conf->certificateVerification);
  134. /* Global Node Lifecycle */
  135. conf->nodeLifecycle.constructor = NULL;
  136. conf->nodeLifecycle.destructor = NULL;
  137. conf->nodeLifecycle.createOptionalChild = NULL;
  138. conf->nodeLifecycle.generateChildNodeId = NULL;
  139. /* Relax constraints for the InformationModel */
  140. conf->relaxEmptyValueConstraint = true; /* Allow empty values */
  141. /* Limits for SecureChannels */
  142. conf->maxSecureChannels = 40;
  143. conf->maxSecurityTokenLifetime = 10 * 60 * 1000; /* 10 minutes */
  144. /* Limits for Sessions */
  145. conf->maxSessions = 100;
  146. conf->maxSessionTimeout = 60.0 * 60.0 * 1000.0; /* 1h */
  147. /* Limits for Subscriptions */
  148. conf->publishingIntervalLimits = UA_DURATIONRANGE(100.0, 3600.0 * 1000.0);
  149. conf->lifeTimeCountLimits = UA_UINT32RANGE(3, 15000);
  150. conf->keepAliveCountLimits = UA_UINT32RANGE(1, 100);
  151. conf->maxNotificationsPerPublish = 1000;
  152. conf->enableRetransmissionQueue = true;
  153. conf->maxRetransmissionQueueSize = 0; /* unlimited */
  154. #ifdef UA_ENABLE_SUBSCRIPTIONS_EVENTS
  155. conf->maxEventsPerNode = 0; /* unlimited */
  156. #endif
  157. /* Limits for MonitoredItems */
  158. conf->samplingIntervalLimits = UA_DURATIONRANGE(50.0, 24.0 * 3600.0 * 1000.0);
  159. conf->queueSizeLimits = UA_UINT32RANGE(1, 100);
  160. #ifdef UA_ENABLE_DISCOVERY
  161. conf->discovery.cleanupTimeout = 60 * 60;
  162. #endif
  163. #ifdef UA_ENABLE_HISTORIZING
  164. /* conf->accessHistoryDataCapability = UA_FALSE; */
  165. /* conf->maxReturnDataValues = 0; */
  166. /* conf->accessHistoryEventsCapability = UA_FALSE; */
  167. /* conf->maxReturnEventValues = 0; */
  168. /* conf->insertDataCapability = UA_FALSE; */
  169. /* conf->insertEventCapability = UA_FALSE; */
  170. /* conf->insertAnnotationsCapability = UA_FALSE; */
  171. /* conf->replaceDataCapability = UA_FALSE; */
  172. /* conf->replaceEventCapability = UA_FALSE; */
  173. /* conf->updateDataCapability = UA_FALSE; */
  174. /* conf->updateEventCapability = UA_FALSE; */
  175. /* conf->deleteRawCapability = UA_FALSE; */
  176. /* conf->deleteEventCapability = UA_FALSE; */
  177. /* conf->deleteAtTimeDataCapability = UA_FALSE; */
  178. #endif
  179. /* --> Finish setting the default static config <-- */
  180. return UA_STATUSCODE_GOOD;
  181. }
  182. UA_EXPORT UA_StatusCode
  183. UA_ServerConfig_setBasics(UA_ServerConfig* conf) {
  184. return setDefaultConfig(conf);
  185. }
  186. static UA_StatusCode
  187. addDefaultNetworkLayers(UA_ServerConfig *conf, UA_UInt16 portNumber,
  188. UA_UInt32 sendBufferSize, UA_UInt32 recvBufferSize) {
  189. return UA_ServerConfig_addNetworkLayerTCP(conf, portNumber, sendBufferSize, recvBufferSize);
  190. }
  191. #ifdef UA_ENABLE_WEBSOCKET_SERVER
  192. UA_EXPORT UA_StatusCode
  193. UA_ServerConfig_addNetworkLayerWS(UA_ServerConfig *conf, UA_UInt16 portNumber,
  194. UA_UInt32 sendBufferSize, UA_UInt32 recvBufferSize) {
  195. /* Add a network layer */
  196. UA_ServerNetworkLayer *tmp = (UA_ServerNetworkLayer *)
  197. UA_realloc(conf->networkLayers, sizeof(UA_ServerNetworkLayer) * (1 + conf->networkLayersSize));
  198. if(!tmp)
  199. return UA_STATUSCODE_BADOUTOFMEMORY;
  200. conf->networkLayers = tmp;
  201. UA_ConnectionConfig config = UA_ConnectionConfig_default;
  202. if (sendBufferSize > 0)
  203. config.sendBufferSize = sendBufferSize;
  204. if (recvBufferSize > 0)
  205. config.recvBufferSize = recvBufferSize;
  206. conf->networkLayers[conf->networkLayersSize] =
  207. UA_ServerNetworkLayerWS(config, portNumber, &conf->logger);
  208. if (!conf->networkLayers[conf->networkLayersSize].handle)
  209. return UA_STATUSCODE_BADOUTOFMEMORY;
  210. conf->networkLayersSize++;
  211. return UA_STATUSCODE_GOOD;
  212. }
  213. #endif
  214. UA_EXPORT UA_StatusCode
  215. UA_ServerConfig_addNetworkLayerTCP(UA_ServerConfig *conf, UA_UInt16 portNumber,
  216. UA_UInt32 sendBufferSize, UA_UInt32 recvBufferSize) {
  217. /* Add a network layer */
  218. UA_ServerNetworkLayer *tmp = (UA_ServerNetworkLayer *)
  219. UA_realloc(conf->networkLayers, sizeof(UA_ServerNetworkLayer) * (1 + conf->networkLayersSize));
  220. if(!tmp)
  221. return UA_STATUSCODE_BADOUTOFMEMORY;
  222. conf->networkLayers = tmp;
  223. UA_ConnectionConfig config = UA_ConnectionConfig_default;
  224. if (sendBufferSize > 0)
  225. config.sendBufferSize = sendBufferSize;
  226. if (recvBufferSize > 0)
  227. config.recvBufferSize = recvBufferSize;
  228. conf->networkLayers[conf->networkLayersSize] =
  229. UA_ServerNetworkLayerTCP(config, portNumber, &conf->logger);
  230. if (!conf->networkLayers[conf->networkLayersSize].handle)
  231. return UA_STATUSCODE_BADOUTOFMEMORY;
  232. conf->networkLayersSize++;
  233. return UA_STATUSCODE_GOOD;
  234. }
  235. UA_EXPORT UA_StatusCode
  236. UA_ServerConfig_addSecurityPolicyNone(UA_ServerConfig *config,
  237. const UA_ByteString *certificate) {
  238. UA_StatusCode retval;
  239. /* Allocate the SecurityPolicies */
  240. UA_SecurityPolicy *tmp = (UA_SecurityPolicy *)
  241. UA_realloc(config->securityPolicies, sizeof(UA_SecurityPolicy) * (1 + config->securityPoliciesSize));
  242. if(!tmp)
  243. return UA_STATUSCODE_BADOUTOFMEMORY;
  244. config->securityPolicies = tmp;
  245. /* Populate the SecurityPolicies */
  246. UA_ByteString localCertificate = UA_BYTESTRING_NULL;
  247. if(certificate)
  248. localCertificate = *certificate;
  249. retval = UA_SecurityPolicy_None(&config->securityPolicies[config->securityPoliciesSize], NULL,
  250. localCertificate, &config->logger);
  251. if(retval != UA_STATUSCODE_GOOD)
  252. return retval;
  253. config->securityPoliciesSize++;
  254. return UA_STATUSCODE_GOOD;
  255. }
  256. UA_EXPORT UA_StatusCode
  257. UA_ServerConfig_addEndpoint(UA_ServerConfig *config, const UA_String securityPolicyUri,
  258. UA_MessageSecurityMode securityMode)
  259. {
  260. UA_StatusCode retval;
  261. /* Allocate the endpoint */
  262. UA_EndpointDescription * tmp = (UA_EndpointDescription *)
  263. UA_realloc(config->endpoints, sizeof(UA_EndpointDescription) * (1 + config->endpointsSize));
  264. if(!tmp) {
  265. return UA_STATUSCODE_BADOUTOFMEMORY;
  266. }
  267. config->endpoints = tmp;
  268. /* Lookup the security policy */
  269. const UA_SecurityPolicy *policy = NULL;
  270. for (size_t i = 0; i < config->securityPoliciesSize; ++i) {
  271. if (UA_String_equal(&securityPolicyUri, &config->securityPolicies[i].policyUri)) {
  272. policy = &config->securityPolicies[i];
  273. break;
  274. }
  275. }
  276. if (!policy)
  277. return UA_STATUSCODE_BADINVALIDARGUMENT;
  278. /* Populate the endpoint */
  279. retval = createEndpoint(config, &config->endpoints[config->endpointsSize],
  280. policy, securityMode);
  281. if(retval != UA_STATUSCODE_GOOD)
  282. return retval;
  283. config->endpointsSize++;
  284. return UA_STATUSCODE_GOOD;
  285. }
  286. UA_EXPORT UA_StatusCode
  287. UA_ServerConfig_addAllEndpoints(UA_ServerConfig *config) {
  288. UA_StatusCode retval;
  289. /* Allocate the endpoints */
  290. UA_EndpointDescription * tmp = (UA_EndpointDescription *)
  291. UA_realloc(config->endpoints, sizeof(UA_EndpointDescription) * (2 * config->securityPoliciesSize + config->endpointsSize));
  292. if(!tmp) {
  293. return UA_STATUSCODE_BADOUTOFMEMORY;
  294. }
  295. config->endpoints = tmp;
  296. /* Populate the endpoints */
  297. for (size_t i = 0; i < config->securityPoliciesSize; ++i) {
  298. if (UA_String_equal(&UA_SECURITY_POLICY_NONE_URI, &config->securityPolicies[i].policyUri)) {
  299. retval = createEndpoint(config, &config->endpoints[config->endpointsSize],
  300. &config->securityPolicies[i], UA_MESSAGESECURITYMODE_NONE);
  301. if(retval != UA_STATUSCODE_GOOD)
  302. return retval;
  303. config->endpointsSize++;
  304. } else {
  305. retval = createEndpoint(config, &config->endpoints[config->endpointsSize],
  306. &config->securityPolicies[i], UA_MESSAGESECURITYMODE_SIGN);
  307. if(retval != UA_STATUSCODE_GOOD)
  308. return retval;
  309. config->endpointsSize++;
  310. retval = createEndpoint(config, &config->endpoints[config->endpointsSize],
  311. &config->securityPolicies[i], UA_MESSAGESECURITYMODE_SIGNANDENCRYPT);
  312. if(retval != UA_STATUSCODE_GOOD)
  313. return retval;
  314. config->endpointsSize++;
  315. }
  316. }
  317. return UA_STATUSCODE_GOOD;
  318. }
  319. UA_EXPORT UA_StatusCode
  320. UA_ServerConfig_setMinimalCustomBuffer(UA_ServerConfig *config, UA_UInt16 portNumber,
  321. const UA_ByteString *certificate,
  322. UA_UInt32 sendBufferSize,
  323. UA_UInt32 recvBufferSize) {
  324. if (!config)
  325. return UA_STATUSCODE_BADINVALIDARGUMENT;
  326. UA_StatusCode retval = setDefaultConfig(config);
  327. if(retval != UA_STATUSCODE_GOOD) {
  328. UA_ServerConfig_clean(config);
  329. return retval;
  330. }
  331. retval = addDefaultNetworkLayers(config, portNumber, sendBufferSize, recvBufferSize);
  332. if(retval != UA_STATUSCODE_GOOD) {
  333. UA_ServerConfig_clean(config);
  334. return retval;
  335. }
  336. /* Allocate the SecurityPolicies */
  337. retval = UA_ServerConfig_addSecurityPolicyNone(config, certificate);
  338. if(retval != UA_STATUSCODE_GOOD) {
  339. UA_ServerConfig_clean(config);
  340. return retval;
  341. }
  342. /* Initialize the Access Control plugin */
  343. retval = UA_AccessControl_default(config, true,
  344. &config->securityPolicies[config->securityPoliciesSize-1].policyUri,
  345. usernamePasswordsSize, usernamePasswords);
  346. if(retval != UA_STATUSCODE_GOOD) {
  347. UA_ServerConfig_clean(config);
  348. return retval;
  349. }
  350. /* Allocate the endpoint */
  351. retval = UA_ServerConfig_addEndpoint(config, UA_SECURITY_POLICY_NONE_URI, UA_MESSAGESECURITYMODE_NONE);
  352. if(retval != UA_STATUSCODE_GOOD) {
  353. UA_ServerConfig_clean(config);
  354. return retval;
  355. }
  356. return UA_STATUSCODE_GOOD;
  357. }
  358. #ifdef UA_ENABLE_ENCRYPTION
  359. UA_EXPORT UA_StatusCode
  360. UA_ServerConfig_addSecurityPolicyBasic128Rsa15(UA_ServerConfig *config,
  361. const UA_ByteString *certificate,
  362. const UA_ByteString *privateKey) {
  363. UA_StatusCode retval;
  364. /* Allocate the SecurityPolicies */
  365. UA_SecurityPolicy *tmp = (UA_SecurityPolicy *)
  366. UA_realloc(config->securityPolicies, sizeof(UA_SecurityPolicy) * (1 + config->securityPoliciesSize));
  367. if(!tmp)
  368. return UA_STATUSCODE_BADOUTOFMEMORY;
  369. config->securityPolicies = tmp;
  370. /* Populate the SecurityPolicies */
  371. UA_ByteString localCertificate = UA_BYTESTRING_NULL;
  372. UA_ByteString localPrivateKey = UA_BYTESTRING_NULL;
  373. if(certificate)
  374. localCertificate = *certificate;
  375. if(privateKey)
  376. localPrivateKey = *privateKey;
  377. retval = UA_SecurityPolicy_Basic128Rsa15(&config->securityPolicies[config->securityPoliciesSize],
  378. &config->certificateVerification,
  379. localCertificate, localPrivateKey, &config->logger);
  380. if(retval != UA_STATUSCODE_GOOD)
  381. return retval;
  382. config->securityPoliciesSize++;
  383. return UA_STATUSCODE_GOOD;
  384. }
  385. UA_EXPORT UA_StatusCode
  386. UA_ServerConfig_addSecurityPolicyBasic256(UA_ServerConfig *config,
  387. const UA_ByteString *certificate,
  388. const UA_ByteString *privateKey) {
  389. UA_StatusCode retval;
  390. /* Allocate the SecurityPolicies */
  391. UA_SecurityPolicy *tmp = (UA_SecurityPolicy *)
  392. UA_realloc(config->securityPolicies, sizeof(UA_SecurityPolicy) * (1 + config->securityPoliciesSize));
  393. if(!tmp)
  394. return UA_STATUSCODE_BADOUTOFMEMORY;
  395. config->securityPolicies = tmp;
  396. /* Populate the SecurityPolicies */
  397. UA_ByteString localCertificate = UA_BYTESTRING_NULL;
  398. UA_ByteString localPrivateKey = UA_BYTESTRING_NULL;
  399. if(certificate)
  400. localCertificate = *certificate;
  401. if(privateKey)
  402. localPrivateKey = *privateKey;
  403. retval = UA_SecurityPolicy_Basic256(&config->securityPolicies[config->securityPoliciesSize],
  404. &config->certificateVerification,
  405. localCertificate, localPrivateKey, &config->logger);
  406. if(retval != UA_STATUSCODE_GOOD)
  407. return retval;
  408. config->securityPoliciesSize++;
  409. return UA_STATUSCODE_GOOD;
  410. }
  411. UA_EXPORT UA_StatusCode
  412. UA_ServerConfig_addSecurityPolicyBasic256Sha256(UA_ServerConfig *config,
  413. const UA_ByteString *certificate,
  414. const UA_ByteString *privateKey) {
  415. UA_StatusCode retval;
  416. /* Allocate the SecurityPolicies */
  417. UA_SecurityPolicy *tmp = (UA_SecurityPolicy *)
  418. UA_realloc(config->securityPolicies, sizeof(UA_SecurityPolicy) * (1 + config->securityPoliciesSize));
  419. if(!tmp)
  420. return UA_STATUSCODE_BADOUTOFMEMORY;
  421. config->securityPolicies = tmp;
  422. /* Populate the SecurityPolicies */
  423. UA_ByteString localCertificate = UA_BYTESTRING_NULL;
  424. UA_ByteString localPrivateKey = UA_BYTESTRING_NULL;
  425. if(certificate)
  426. localCertificate = *certificate;
  427. if(privateKey)
  428. localPrivateKey = *privateKey;
  429. retval = UA_SecurityPolicy_Basic256Sha256(&config->securityPolicies[config->securityPoliciesSize],
  430. &config->certificateVerification,
  431. localCertificate, localPrivateKey, &config->logger);
  432. if(retval != UA_STATUSCODE_GOOD)
  433. return retval;
  434. config->securityPoliciesSize++;
  435. return UA_STATUSCODE_GOOD;
  436. }
  437. UA_EXPORT UA_StatusCode
  438. UA_ServerConfig_addAllSecurityPolicies(UA_ServerConfig *config,
  439. const UA_ByteString *certificate,
  440. const UA_ByteString *privateKey) {
  441. UA_StatusCode retval;
  442. /* Allocate the SecurityPolicies */
  443. UA_SecurityPolicy *tmp = (UA_SecurityPolicy *)
  444. UA_realloc(config->securityPolicies, sizeof(UA_SecurityPolicy) * (4 + config->securityPoliciesSize));
  445. if(!tmp)
  446. return UA_STATUSCODE_BADOUTOFMEMORY;
  447. config->securityPolicies = tmp;
  448. /* Populate the SecurityPolicies */
  449. UA_ByteString localCertificate = UA_BYTESTRING_NULL;
  450. UA_ByteString localPrivateKey = UA_BYTESTRING_NULL;
  451. if(certificate)
  452. localCertificate = *certificate;
  453. if(privateKey)
  454. localPrivateKey = *privateKey;
  455. retval = UA_SecurityPolicy_None(&config->securityPolicies[config->securityPoliciesSize], NULL,
  456. localCertificate, &config->logger);
  457. if(retval != UA_STATUSCODE_GOOD)
  458. return retval;
  459. config->securityPoliciesSize++;
  460. retval = UA_SecurityPolicy_Basic128Rsa15(&config->securityPolicies[config->securityPoliciesSize],
  461. &config->certificateVerification,
  462. localCertificate, localPrivateKey, &config->logger);
  463. if(retval != UA_STATUSCODE_GOOD)
  464. return retval;
  465. config->securityPoliciesSize++;
  466. retval = UA_SecurityPolicy_Basic256(&config->securityPolicies[config->securityPoliciesSize],
  467. &config->certificateVerification,
  468. localCertificate, localPrivateKey, &config->logger);
  469. if(retval != UA_STATUSCODE_GOOD)
  470. return retval;
  471. config->securityPoliciesSize++;
  472. retval = UA_SecurityPolicy_Basic256Sha256(&config->securityPolicies[config->securityPoliciesSize],
  473. &config->certificateVerification,
  474. localCertificate, localPrivateKey, &config->logger);
  475. if(retval != UA_STATUSCODE_GOOD)
  476. return retval;
  477. config->securityPoliciesSize++;
  478. return retval;
  479. }
  480. UA_EXPORT UA_StatusCode
  481. UA_ServerConfig_setDefaultWithSecurityPolicies(UA_ServerConfig *conf,
  482. UA_UInt16 portNumber,
  483. const UA_ByteString *certificate,
  484. const UA_ByteString *privateKey,
  485. const UA_ByteString *trustList,
  486. size_t trustListSize,
  487. const UA_ByteString *issuerList,
  488. size_t issuerListSize,
  489. const UA_ByteString *revocationList,
  490. size_t revocationListSize) {
  491. UA_StatusCode retval = setDefaultConfig(conf);
  492. if(retval != UA_STATUSCODE_GOOD) {
  493. UA_ServerConfig_clean(conf);
  494. return retval;
  495. }
  496. retval = UA_CertificateVerification_Trustlist(&conf->certificateVerification,
  497. trustList, trustListSize,
  498. issuerList, issuerListSize,
  499. revocationList, revocationListSize);
  500. if (retval != UA_STATUSCODE_GOOD)
  501. return retval;
  502. if(trustListSize == 0)
  503. UA_LOG_WARNING(&conf->logger, UA_LOGCATEGORY_USERLAND,
  504. "No CA trust-list provided. "
  505. "Any remote certificate will be accepted.");
  506. retval = addDefaultNetworkLayers(conf, portNumber, 0, 0);
  507. if(retval != UA_STATUSCODE_GOOD) {
  508. UA_ServerConfig_clean(conf);
  509. return retval;
  510. }
  511. retval = UA_ServerConfig_addAllSecurityPolicies(conf, certificate, privateKey);
  512. if(retval != UA_STATUSCODE_GOOD) {
  513. UA_ServerConfig_clean(conf);
  514. return retval;
  515. }
  516. retval = UA_AccessControl_default(conf, true,
  517. &conf->securityPolicies[conf->securityPoliciesSize-1].policyUri,
  518. usernamePasswordsSize, usernamePasswords);
  519. if(retval != UA_STATUSCODE_GOOD) {
  520. UA_ServerConfig_clean(conf);
  521. return retval;
  522. }
  523. retval = UA_ServerConfig_addAllEndpoints(conf);
  524. if(retval != UA_STATUSCODE_GOOD) {
  525. UA_ServerConfig_clean(conf);
  526. return retval;
  527. }
  528. return UA_STATUSCODE_GOOD;
  529. }
  530. #endif
  531. /***************************/
  532. /* Default Client Settings */
  533. /***************************/
  534. static UA_INLINE void
  535. UA_ClientConnectionTCP_poll_callback(UA_Client *client, void *data) {
  536. UA_ClientConnectionTCP_poll(client, data);
  537. }
  538. UA_StatusCode
  539. UA_ClientConfig_setDefault(UA_ClientConfig *config) {
  540. config->timeout = 5000;
  541. config->secureChannelLifeTime = 10 * 60 * 1000; /* 10 minutes */
  542. config->logger.log = UA_Log_Stdout_log;
  543. config->logger.context = NULL;
  544. config->logger.clear = UA_Log_Stdout_clear;
  545. config->localConnectionConfig = UA_ConnectionConfig_default;
  546. /* Certificate Verification that accepts every certificate. Can be
  547. * overwritten when the policy is specialized. */
  548. UA_CertificateVerification_AcceptAll(&config->certificateVerification);
  549. /* With encryption enabled, the applicationUri needs to match the URI from
  550. * the certificate */
  551. config->clientDescription.applicationUri = UA_STRING_ALLOC(APPLICATION_URI);
  552. config->clientDescription.applicationType = UA_APPLICATIONTYPE_CLIENT;
  553. if(config->securityPoliciesSize > 0) {
  554. UA_LOG_ERROR(&config->logger, UA_LOGCATEGORY_NETWORK,
  555. "Could not initialize a config that already has SecurityPolicies");
  556. return UA_STATUSCODE_BADINTERNALERROR;
  557. }
  558. config->securityPolicies = (UA_SecurityPolicy*)UA_malloc(sizeof(UA_SecurityPolicy));
  559. if(!config->securityPolicies)
  560. return UA_STATUSCODE_BADOUTOFMEMORY;
  561. UA_StatusCode retval = UA_SecurityPolicy_None(config->securityPolicies, NULL,
  562. UA_BYTESTRING_NULL, &config->logger);
  563. if(retval != UA_STATUSCODE_GOOD) {
  564. UA_free(config->securityPolicies);
  565. config->securityPolicies = NULL;
  566. return retval;
  567. }
  568. config->securityPoliciesSize = 1;
  569. config->connectionFunc = UA_ClientConnectionTCP;
  570. config->initConnectionFunc = UA_ClientConnectionTCP_init; /* for async client */
  571. config->pollConnectionFunc = UA_ClientConnectionTCP_poll_callback; /* for async connection */
  572. config->customDataTypes = NULL;
  573. config->stateCallback = NULL;
  574. config->connectivityCheckInterval = 0;
  575. config->requestedSessionTimeout = 1200000; /* requestedSessionTimeout */
  576. config->inactivityCallback = NULL;
  577. config->clientContext = NULL;
  578. #ifdef UA_ENABLE_SUBSCRIPTIONS
  579. config->outStandingPublishRequests = 10;
  580. config->subscriptionInactivityCallback = NULL;
  581. #endif
  582. return UA_STATUSCODE_GOOD;
  583. }
  584. #ifdef UA_ENABLE_ENCRYPTION
  585. UA_StatusCode
  586. UA_ClientConfig_setDefaultEncryption(UA_ClientConfig *config,
  587. UA_ByteString localCertificate, UA_ByteString privateKey,
  588. const UA_ByteString *trustList, size_t trustListSize,
  589. const UA_ByteString *revocationList, size_t revocationListSize) {
  590. UA_StatusCode retval = UA_ClientConfig_setDefault(config);
  591. if(retval != UA_STATUSCODE_GOOD)
  592. return retval;
  593. retval = UA_CertificateVerification_Trustlist(&config->certificateVerification,
  594. trustList, trustListSize,
  595. NULL, 0,
  596. revocationList, revocationListSize);
  597. if(retval != UA_STATUSCODE_GOOD)
  598. return retval;
  599. /* Populate SecurityPolicies */
  600. UA_SecurityPolicy *sp = (UA_SecurityPolicy*)
  601. UA_realloc(config->securityPolicies, sizeof(UA_SecurityPolicy) * 4);
  602. if(!sp)
  603. return UA_STATUSCODE_BADOUTOFMEMORY;
  604. config->securityPolicies = sp;
  605. retval = UA_SecurityPolicy_Basic128Rsa15(&config->securityPolicies[1],
  606. &config->certificateVerification,
  607. localCertificate, privateKey, &config->logger);
  608. if(retval != UA_STATUSCODE_GOOD)
  609. return retval;
  610. ++config->securityPoliciesSize;
  611. retval = UA_SecurityPolicy_Basic256(&config->securityPolicies[2],
  612. &config->certificateVerification,
  613. localCertificate, privateKey, &config->logger);
  614. if(retval != UA_STATUSCODE_GOOD)
  615. return retval;
  616. ++config->securityPoliciesSize;
  617. retval = UA_SecurityPolicy_Basic256Sha256(&config->securityPolicies[3],
  618. &config->certificateVerification,
  619. localCertificate, privateKey, &config->logger);
  620. if(retval != UA_STATUSCODE_GOOD)
  621. return retval;
  622. ++config->securityPoliciesSize;
  623. return UA_STATUSCODE_GOOD;
  624. }
  625. #endif