ua_config_default.c 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664
  1. /* This work is licensed under a Creative Commons CCZero 1.0 Universal License.
  2. * See http://creativecommons.org/publicdomain/zero/1.0/ for more information.
  3. *
  4. * Copyright 2017 (c) Fraunhofer IOSB (Author: Julius Pfrommer)
  5. * Copyright 2017 (c) Julian Grothoff
  6. * Copyright 2017-2018 (c) Mark Giraud, Fraunhofer IOSB
  7. * Copyright 2017 (c) Stefan Profanter, fortiss GmbH
  8. * Copyright 2017 (c) Thomas Stalder, Blue Time Concept SA
  9. * Copyright 2018 (c) Daniel Feist, Precitec GmbH & Co. KG
  10. */
  11. #include "ua_plugin_securitypolicy.h"
  12. #include "ua_config_default.h"
  13. #include "ua_client_config.h"
  14. #include "ua_log_stdout.h"
  15. #include "ua_network_tcp.h"
  16. #include "ua_accesscontrol_default.h"
  17. #include "ua_pki_certificate.h"
  18. #include "ua_nodestore_default.h"
  19. #include "ua_securitypolicy_none.h"
  20. #ifdef UA_ENABLE_ENCRYPTION
  21. #include "ua_securitypolicy_basic128rsa15.h"
  22. #include "ua_securitypolicy_basic256sha256.h"
  23. #endif
  24. /* Struct initialization works across ANSI C/C99/C++ if it is done when the
  25. * variable is first declared. Assigning values to existing structs is
  26. * heterogeneous across the three. */
  27. static UA_INLINE UA_UInt32Range
  28. UA_UINT32RANGE(UA_UInt32 min, UA_UInt32 max) {
  29. UA_UInt32Range range = {min, max};
  30. return range;
  31. }
  32. static UA_INLINE UA_DurationRange
  33. UA_DURATIONRANGE(UA_Duration min, UA_Duration max) {
  34. UA_DurationRange range = {min, max};
  35. return range;
  36. }
  37. /*******************************/
  38. /* Default Connection Settings */
  39. /*******************************/
  40. const UA_ConnectionConfig UA_ConnectionConfig_default = {
  41. 0, /* .protocolVersion */
  42. 65535, /* .sendBufferSize, 64k per chunk */
  43. 65535, /* .recvBufferSize, 64k per chunk */
  44. 0, /* .maxMessageSize, 0 -> unlimited */
  45. 0 /* .maxChunkCount, 0 -> unlimited */
  46. };
  47. /***************************/
  48. /* Default Server Settings */
  49. /***************************/
  50. #define MANUFACTURER_NAME "open62541"
  51. #define PRODUCT_NAME "open62541 OPC UA Server"
  52. #define PRODUCT_URI "http://open62541.org"
  53. #define APPLICATION_NAME "open62541-based OPC UA Application"
  54. #define APPLICATION_URI "urn:unconfigured:application"
  55. #define STRINGIFY(arg) #arg
  56. #define VERSION(MAJOR, MINOR, PATCH, LABEL) \
  57. STRINGIFY(MAJOR) "." STRINGIFY(MINOR) "." STRINGIFY(PATCH) LABEL
  58. static UA_StatusCode
  59. createSecurityPolicyNoneEndpoint(UA_ServerConfig *conf, UA_Endpoint *endpoint,
  60. const UA_ByteString localCertificate) {
  61. UA_EndpointDescription_init(&endpoint->endpointDescription);
  62. UA_SecurityPolicy_None(&endpoint->securityPolicy, NULL, localCertificate, conf->logger);
  63. endpoint->endpointDescription.securityMode = UA_MESSAGESECURITYMODE_NONE;
  64. endpoint->endpointDescription.securityPolicyUri =
  65. UA_STRING_ALLOC("http://opcfoundation.org/UA/SecurityPolicy#None");
  66. endpoint->endpointDescription.transportProfileUri =
  67. UA_STRING_ALLOC("http://opcfoundation.org/UA-Profile/Transport/uatcp-uasc-uabinary");
  68. /* Enable all login mechanisms from the access control plugin */
  69. UA_StatusCode retval = UA_Array_copy(conf->accessControl.userTokenPolicies,
  70. conf->accessControl.userTokenPoliciesSize,
  71. (void **)&endpoint->endpointDescription.userIdentityTokens,
  72. &UA_TYPES[UA_TYPES_USERTOKENPOLICY]);
  73. if(retval != UA_STATUSCODE_GOOD)
  74. return retval;
  75. endpoint->endpointDescription.userIdentityTokensSize =
  76. conf->accessControl.userTokenPoliciesSize;
  77. UA_String_copy(&localCertificate, &endpoint->endpointDescription.serverCertificate);
  78. UA_ApplicationDescription_copy(&conf->applicationDescription,
  79. &endpoint->endpointDescription.server);
  80. return UA_STATUSCODE_GOOD;
  81. }
  82. void
  83. UA_ServerConfig_set_customHostname(UA_ServerConfig *config, const UA_String customHostname) {
  84. if(!config)
  85. return;
  86. UA_String_deleteMembers(&config->customHostname);
  87. UA_String_copy(&customHostname, &config->customHostname);
  88. }
  89. #ifdef UA_ENABLE_ENCRYPTION
  90. static UA_StatusCode
  91. createSecurityPolicyBasic128Rsa15Endpoint(UA_ServerConfig *const conf,
  92. UA_Endpoint *endpoint,
  93. UA_MessageSecurityMode securityMode,
  94. const UA_ByteString localCertificate,
  95. const UA_ByteString localPrivateKey) {
  96. UA_EndpointDescription_init(&endpoint->endpointDescription);
  97. UA_StatusCode retval =
  98. UA_SecurityPolicy_Basic128Rsa15(&endpoint->securityPolicy, &conf->certificateVerification,
  99. localCertificate, localPrivateKey, conf->logger);
  100. if(retval != UA_STATUSCODE_GOOD) {
  101. endpoint->securityPolicy.deleteMembers(&endpoint->securityPolicy);
  102. return retval;
  103. }
  104. endpoint->endpointDescription.securityMode = securityMode;
  105. endpoint->endpointDescription.securityPolicyUri =
  106. UA_STRING_ALLOC("http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15");
  107. endpoint->endpointDescription.transportProfileUri =
  108. UA_STRING_ALLOC("http://opcfoundation.org/UA-Profile/Transport/uatcp-uasc-uabinary");
  109. /* Enable all login mechanisms from the access control plugin */
  110. retval = UA_Array_copy(conf->accessControl.userTokenPolicies,
  111. conf->accessControl.userTokenPoliciesSize,
  112. (void **)&endpoint->endpointDescription.userIdentityTokens,
  113. &UA_TYPES[UA_TYPES_USERTOKENPOLICY]);
  114. if(retval != UA_STATUSCODE_GOOD)
  115. return retval;
  116. endpoint->endpointDescription.userIdentityTokensSize =
  117. conf->accessControl.userTokenPoliciesSize;
  118. UA_String_copy(&localCertificate, &endpoint->endpointDescription.serverCertificate);
  119. UA_ApplicationDescription_copy(&conf->applicationDescription,
  120. &endpoint->endpointDescription.server);
  121. return UA_STATUSCODE_GOOD;
  122. }
  123. static UA_StatusCode
  124. createSecurityPolicyBasic256Sha256Endpoint(UA_ServerConfig *const conf,
  125. UA_Endpoint *endpoint,
  126. UA_MessageSecurityMode securityMode,
  127. const UA_ByteString localCertificate,
  128. const UA_ByteString localPrivateKey) {
  129. UA_EndpointDescription_init(&endpoint->endpointDescription);
  130. UA_StatusCode retval =
  131. UA_SecurityPolicy_Basic256Sha256(&endpoint->securityPolicy, &conf->certificateVerification, localCertificate,
  132. localPrivateKey, conf->logger);
  133. if(retval != UA_STATUSCODE_GOOD) {
  134. endpoint->securityPolicy.deleteMembers(&endpoint->securityPolicy);
  135. return retval;
  136. }
  137. endpoint->endpointDescription.securityMode = securityMode;
  138. endpoint->endpointDescription.securityPolicyUri =
  139. UA_STRING_ALLOC("http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256");
  140. endpoint->endpointDescription.transportProfileUri =
  141. UA_STRING_ALLOC("http://opcfoundation.org/UA-Profile/Transport/uatcp-uasc-uabinary");
  142. /* Enable all login mechanisms from the access control plugin */
  143. retval = UA_Array_copy(conf->accessControl.userTokenPolicies,
  144. conf->accessControl.userTokenPoliciesSize,
  145. (void **)&endpoint->endpointDescription.userIdentityTokens,
  146. &UA_TYPES[UA_TYPES_USERTOKENPOLICY]);
  147. if(retval != UA_STATUSCODE_GOOD)
  148. return retval;
  149. endpoint->endpointDescription.userIdentityTokensSize =
  150. conf->accessControl.userTokenPoliciesSize;
  151. UA_String_copy(&localCertificate, &endpoint->endpointDescription.serverCertificate);
  152. UA_ApplicationDescription_copy(&conf->applicationDescription,
  153. &endpoint->endpointDescription.server);
  154. return UA_STATUSCODE_GOOD;
  155. }
  156. #endif
  157. const size_t usernamePasswordsSize = 2;
  158. UA_UsernamePasswordLogin usernamePasswords[2] = {
  159. {UA_STRING_STATIC("user1"), UA_STRING_STATIC("password")},
  160. {UA_STRING_STATIC("user2"), UA_STRING_STATIC("password1")}};
  161. static UA_ServerConfig *
  162. createDefaultConfig(void) {
  163. UA_ServerConfig *conf = (UA_ServerConfig *)UA_malloc(sizeof(UA_ServerConfig));
  164. if(!conf)
  165. return NULL;
  166. /* Zero out.. All members have a valid initial value */
  167. memset(conf, 0, sizeof(UA_ServerConfig));
  168. /* --> Start setting the default static config <-- */
  169. conf->nThreads = 1;
  170. conf->logger = UA_Log_Stdout;
  171. /* Server Description */
  172. conf->buildInfo.productUri = UA_STRING_ALLOC(PRODUCT_URI);
  173. conf->buildInfo.manufacturerName = UA_STRING_ALLOC(MANUFACTURER_NAME);
  174. conf->buildInfo.productName = UA_STRING_ALLOC(PRODUCT_NAME);
  175. conf->buildInfo.softwareVersion =
  176. UA_STRING_ALLOC(VERSION(UA_OPEN62541_VER_MAJOR, UA_OPEN62541_VER_MINOR,
  177. UA_OPEN62541_VER_PATCH, UA_OPEN62541_VER_LABEL));
  178. conf->buildInfo.buildNumber = UA_STRING_ALLOC(__DATE__
  179. " "
  180. __TIME__);
  181. conf->buildInfo.buildDate = 0;
  182. conf->applicationDescription.applicationUri = UA_STRING_ALLOC(APPLICATION_URI);
  183. conf->applicationDescription.productUri = UA_STRING_ALLOC(PRODUCT_URI);
  184. conf->applicationDescription.applicationName =
  185. UA_LOCALIZEDTEXT_ALLOC("en", APPLICATION_NAME);
  186. conf->applicationDescription.applicationType = UA_APPLICATIONTYPE_SERVER;
  187. /* conf->applicationDescription.gatewayServerUri = UA_STRING_NULL; */
  188. /* conf->applicationDescription.discoveryProfileUri = UA_STRING_NULL; */
  189. /* conf->applicationDescription.discoveryUrlsSize = 0; */
  190. /* conf->applicationDescription.discoveryUrls = NULL; */
  191. #ifdef UA_ENABLE_DISCOVERY
  192. /* conf->mdnsServerName = UA_STRING_NULL; */
  193. /* conf->serverCapabilitiesSize = 0; */
  194. /* conf->serverCapabilities = NULL; */
  195. #endif
  196. /* Custom DataTypes */
  197. /* conf->customDataTypesSize = 0; */
  198. /* conf->customDataTypes = NULL; */
  199. /* Networking */
  200. /* conf->networkLayersSize = 0; */
  201. /* conf->networkLayers = NULL; */
  202. /* conf->customHostname = UA_STRING_NULL; */
  203. /* Endpoints */
  204. /* conf->endpoints = {0, NULL}; */
  205. /* Certificate Verification that accepts every certificate. Can be
  206. * overwritten when the policy is specialized. */
  207. UA_CertificateVerification_AcceptAll(&conf->certificateVerification);
  208. /* Global Node Lifecycle */
  209. conf->nodeLifecycle.constructor = NULL;
  210. conf->nodeLifecycle.destructor = NULL;
  211. /* Access Control. Anonymous Login only. */
  212. conf->accessControl = UA_AccessControl_default(true, usernamePasswordsSize, usernamePasswords);
  213. /* Limits for SecureChannels */
  214. conf->maxSecureChannels = 40;
  215. conf->maxSecurityTokenLifetime = 10 * 60 * 1000; /* 10 minutes */
  216. /* Limits for Sessions */
  217. conf->maxSessions = 100;
  218. conf->maxSessionTimeout = 60.0 * 60.0 * 1000.0; /* 1h */
  219. /* Limits for Subscriptions */
  220. conf->publishingIntervalLimits = UA_DURATIONRANGE(100.0, 3600.0 * 1000.0);
  221. conf->lifeTimeCountLimits = UA_UINT32RANGE(3, 15000);
  222. conf->keepAliveCountLimits = UA_UINT32RANGE(1, 100);
  223. conf->maxNotificationsPerPublish = 1000;
  224. conf->maxRetransmissionQueueSize = 0; /* unlimited */
  225. /* Limits for MonitoredItems */
  226. conf->samplingIntervalLimits = UA_DURATIONRANGE(50.0, 24.0 * 3600.0 * 1000.0);
  227. conf->queueSizeLimits = UA_UINT32RANGE(1, 100);
  228. #ifdef UA_ENABLE_DISCOVERY
  229. conf->discoveryCleanupTimeout = 60 * 60;
  230. #endif
  231. /* --> Finish setting the default static config <-- */
  232. return conf;
  233. }
  234. static UA_StatusCode
  235. addDefaultNetworkLayers(UA_ServerConfig *conf, UA_UInt16 portNumber, UA_UInt32 sendBufferSize, UA_UInt32 recvBufferSize) {
  236. /* Add a network layer */
  237. conf->networkLayers = (UA_ServerNetworkLayer *)
  238. UA_malloc(sizeof(UA_ServerNetworkLayer));
  239. if(!conf->networkLayers)
  240. return UA_STATUSCODE_BADOUTOFMEMORY;
  241. UA_ConnectionConfig config = UA_ConnectionConfig_default;
  242. if (sendBufferSize > 0)
  243. config.sendBufferSize = sendBufferSize;
  244. if (recvBufferSize > 0)
  245. config.recvBufferSize = recvBufferSize;
  246. conf->networkLayers[0] =
  247. UA_ServerNetworkLayerTCP(config, portNumber, conf->logger);
  248. conf->networkLayersSize = 1;
  249. return UA_STATUSCODE_GOOD;
  250. }
  251. UA_ServerConfig *
  252. UA_ServerConfig_new_customBuffer(UA_UInt16 portNumber,
  253. const UA_ByteString *certificate,
  254. UA_UInt32 sendBufferSize,
  255. UA_UInt32 recvBufferSize) {
  256. UA_ServerConfig *conf = createDefaultConfig();
  257. UA_StatusCode retval = UA_Nodestore_default_new(&conf->nodestore);
  258. if(retval != UA_STATUSCODE_GOOD) {
  259. UA_ServerConfig_delete(conf);
  260. return NULL;
  261. }
  262. if(addDefaultNetworkLayers(conf, portNumber, sendBufferSize, recvBufferSize) != UA_STATUSCODE_GOOD) {
  263. UA_ServerConfig_delete(conf);
  264. return NULL;
  265. }
  266. /* Allocate the endpoint */
  267. conf->endpointsSize = 1;
  268. conf->endpoints = (UA_Endpoint *)UA_malloc(sizeof(UA_Endpoint));
  269. if(!conf->endpoints) {
  270. UA_ServerConfig_delete(conf);
  271. return NULL;
  272. }
  273. /* Populate the endpoint */
  274. UA_ByteString localCertificate = UA_BYTESTRING_NULL;
  275. if(certificate)
  276. localCertificate = *certificate;
  277. retval =
  278. createSecurityPolicyNoneEndpoint(conf, &conf->endpoints[0], localCertificate);
  279. if(retval != UA_STATUSCODE_GOOD) {
  280. UA_ServerConfig_delete(conf);
  281. return NULL;
  282. }
  283. return conf;
  284. }
  285. #ifdef UA_ENABLE_ENCRYPTION
  286. UA_ServerConfig *
  287. UA_ServerConfig_new_basic128rsa15(UA_UInt16 portNumber,
  288. const UA_ByteString *certificate,
  289. const UA_ByteString *privateKey,
  290. const UA_ByteString *trustList,
  291. size_t trustListSize,
  292. const UA_ByteString *revocationList,
  293. size_t revocationListSize) {
  294. UA_ServerConfig *conf = createDefaultConfig();
  295. UA_StatusCode retval = UA_CertificateVerification_Trustlist(&conf->certificateVerification,
  296. trustList, trustListSize,
  297. revocationList, revocationListSize);
  298. if(retval != UA_STATUSCODE_GOOD) {
  299. UA_ServerConfig_delete(conf);
  300. return NULL;
  301. }
  302. retval = UA_Nodestore_default_new(&conf->nodestore);
  303. if(retval != UA_STATUSCODE_GOOD) {
  304. UA_ServerConfig_delete(conf);
  305. return NULL;
  306. }
  307. if(addDefaultNetworkLayers(conf, portNumber, 0, 0) != UA_STATUSCODE_GOOD) {
  308. UA_ServerConfig_delete(conf);
  309. return NULL;
  310. }
  311. if(trustListSize == 0)
  312. UA_LOG_WARNING(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND,
  313. "No CA trust-list provided. Any remote certificate will be accepted.");
  314. /* Allocate the endpoints */
  315. conf->endpointsSize = 0;
  316. conf->endpoints = (UA_Endpoint *)UA_malloc(sizeof(UA_Endpoint) * 3);
  317. if(!conf->endpoints) {
  318. UA_ServerConfig_delete(conf);
  319. return NULL;
  320. }
  321. /* Populate the endpoints */
  322. ++conf->endpointsSize;
  323. retval = createSecurityPolicyNoneEndpoint(conf, &conf->endpoints[0], *certificate);
  324. if(retval != UA_STATUSCODE_GOOD) {
  325. UA_ServerConfig_delete(conf);
  326. return NULL;
  327. }
  328. ++conf->endpointsSize;
  329. retval = createSecurityPolicyBasic128Rsa15Endpoint(conf, &conf->endpoints[1],
  330. UA_MESSAGESECURITYMODE_SIGN, *certificate,
  331. *privateKey);
  332. if(retval != UA_STATUSCODE_GOOD) {
  333. UA_ServerConfig_delete(conf);
  334. return NULL;
  335. }
  336. ++conf->endpointsSize;
  337. retval = createSecurityPolicyBasic128Rsa15Endpoint(conf, &conf->endpoints[2],
  338. UA_MESSAGESECURITYMODE_SIGNANDENCRYPT, *certificate,
  339. *privateKey);
  340. if(retval != UA_STATUSCODE_GOOD) {
  341. UA_ServerConfig_delete(conf);
  342. return NULL;
  343. }
  344. return conf;
  345. }
  346. UA_ServerConfig *
  347. UA_ServerConfig_new_basic256sha256(UA_UInt16 portNumber,
  348. const UA_ByteString *certificate,
  349. const UA_ByteString *privateKey,
  350. const UA_ByteString *trustList,
  351. size_t trustListSize,
  352. const UA_ByteString *revocationList,
  353. size_t revocationListSize) {
  354. UA_ServerConfig *conf = createDefaultConfig();
  355. UA_StatusCode retval = UA_CertificateVerification_Trustlist(&conf->certificateVerification,
  356. trustList, trustListSize,
  357. revocationList, revocationListSize);
  358. if(retval != UA_STATUSCODE_GOOD) {
  359. UA_ServerConfig_delete(conf);
  360. return NULL;
  361. }
  362. retval = UA_Nodestore_default_new(&conf->nodestore);
  363. if(retval != UA_STATUSCODE_GOOD) {
  364. UA_ServerConfig_delete(conf);
  365. return NULL;
  366. }
  367. if(addDefaultNetworkLayers(conf, portNumber, 0, 0) != UA_STATUSCODE_GOOD) {
  368. UA_ServerConfig_delete(conf);
  369. return NULL;
  370. }
  371. if(trustListSize == 0)
  372. UA_LOG_WARNING(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND,
  373. "No CA trust-list provided. Any remote certificate will be accepted.");
  374. /* Allocate the endpoints */
  375. conf->endpointsSize = 0;
  376. conf->endpoints = (UA_Endpoint *)UA_malloc(sizeof(UA_Endpoint) * 3);
  377. if(!conf->endpoints) {
  378. UA_ServerConfig_delete(conf);
  379. return NULL;
  380. }
  381. /* Populate the endpoints */
  382. ++conf->endpointsSize;
  383. retval = createSecurityPolicyNoneEndpoint(conf, &conf->endpoints[0], *certificate);
  384. if(retval != UA_STATUSCODE_GOOD) {
  385. UA_ServerConfig_delete(conf);
  386. return NULL;
  387. }
  388. ++conf->endpointsSize;
  389. retval = createSecurityPolicyBasic256Sha256Endpoint(conf, &conf->endpoints[1],
  390. UA_MESSAGESECURITYMODE_SIGN, *certificate,
  391. *privateKey);
  392. if(retval != UA_STATUSCODE_GOOD) {
  393. UA_ServerConfig_delete(conf);
  394. return NULL;
  395. }
  396. ++conf->endpointsSize;
  397. retval = createSecurityPolicyBasic256Sha256Endpoint(conf, &conf->endpoints[2],
  398. UA_MESSAGESECURITYMODE_SIGNANDENCRYPT, *certificate,
  399. *privateKey);
  400. if(retval != UA_STATUSCODE_GOOD) {
  401. UA_ServerConfig_delete(conf);
  402. return NULL;
  403. }
  404. return conf;
  405. }
  406. UA_ServerConfig *
  407. UA_ServerConfig_new_allSecurityPolicies(UA_UInt16 portNumber,
  408. const UA_ByteString *certificate,
  409. const UA_ByteString *privateKey,
  410. const UA_ByteString *trustList,
  411. size_t trustListSize,
  412. const UA_ByteString *revocationList,
  413. size_t revocationListSize) {
  414. UA_ServerConfig *conf = createDefaultConfig();
  415. UA_StatusCode retval = UA_CertificateVerification_Trustlist(&conf->certificateVerification,
  416. trustList, trustListSize,
  417. revocationList, revocationListSize);
  418. if(retval != UA_STATUSCODE_GOOD) {
  419. UA_ServerConfig_delete(conf);
  420. return NULL;
  421. }
  422. retval = UA_Nodestore_default_new(&conf->nodestore);
  423. if(retval != UA_STATUSCODE_GOOD) {
  424. UA_ServerConfig_delete(conf);
  425. return NULL;
  426. }
  427. if(addDefaultNetworkLayers(conf, portNumber, 0, 0) != UA_STATUSCODE_GOOD) {
  428. UA_ServerConfig_delete(conf);
  429. return NULL;
  430. }
  431. if(trustListSize == 0)
  432. UA_LOG_WARNING(UA_Log_Stdout, UA_LOGCATEGORY_USERLAND,
  433. "No CA trust-list provided. Any remote certificate will be accepted.");
  434. /* Allocate the endpoints */
  435. conf->endpointsSize = 0;
  436. conf->endpoints = (UA_Endpoint *)UA_malloc(sizeof(UA_Endpoint) * 5);
  437. if(!conf->endpoints) {
  438. UA_ServerConfig_delete(conf);
  439. return NULL;
  440. }
  441. /* Populate the endpoints */
  442. retval = createSecurityPolicyNoneEndpoint(conf, &conf->endpoints[conf->endpointsSize], *certificate);
  443. ++conf->endpointsSize;
  444. if(retval != UA_STATUSCODE_GOOD) {
  445. UA_ServerConfig_delete(conf);
  446. return NULL;
  447. }
  448. retval = createSecurityPolicyBasic128Rsa15Endpoint(conf, &conf->endpoints[conf->endpointsSize],
  449. UA_MESSAGESECURITYMODE_SIGN, *certificate,
  450. *privateKey);
  451. ++conf->endpointsSize;
  452. if(retval != UA_STATUSCODE_GOOD) {
  453. UA_ServerConfig_delete(conf);
  454. return NULL;
  455. }
  456. retval = createSecurityPolicyBasic128Rsa15Endpoint(conf, &conf->endpoints[conf->endpointsSize],
  457. UA_MESSAGESECURITYMODE_SIGNANDENCRYPT, *certificate,
  458. *privateKey);
  459. ++conf->endpointsSize;
  460. if(retval != UA_STATUSCODE_GOOD) {
  461. UA_ServerConfig_delete(conf);
  462. return NULL;
  463. }
  464. retval = createSecurityPolicyBasic256Sha256Endpoint(conf, &conf->endpoints[conf->endpointsSize],
  465. UA_MESSAGESECURITYMODE_SIGN, *certificate,
  466. *privateKey);
  467. ++conf->endpointsSize;
  468. if(retval != UA_STATUSCODE_GOOD) {
  469. UA_ServerConfig_delete(conf);
  470. return NULL;
  471. }
  472. retval = createSecurityPolicyBasic256Sha256Endpoint(conf, &conf->endpoints[conf->endpointsSize],
  473. UA_MESSAGESECURITYMODE_SIGNANDENCRYPT, *certificate,
  474. *privateKey);
  475. ++conf->endpointsSize;
  476. if(retval != UA_STATUSCODE_GOOD) {
  477. UA_ServerConfig_delete(conf);
  478. return NULL;
  479. }
  480. return conf;
  481. }
  482. #endif
  483. void
  484. UA_ServerConfig_delete(UA_ServerConfig *config) {
  485. if(!config)
  486. return;
  487. /* Server Description */
  488. UA_BuildInfo_deleteMembers(&config->buildInfo);
  489. UA_ApplicationDescription_deleteMembers(&config->applicationDescription);
  490. #ifdef UA_ENABLE_DISCOVERY
  491. UA_String_deleteMembers(&config->mdnsServerName);
  492. UA_Array_delete(config->serverCapabilities, config->serverCapabilitiesSize,
  493. &UA_TYPES[UA_TYPES_STRING]);
  494. config->serverCapabilities = NULL;
  495. config->serverCapabilitiesSize = 0;
  496. #endif
  497. /* Nodestore */
  498. if(config->nodestore.deleteNodestore)
  499. config->nodestore.deleteNodestore(config->nodestore.context);
  500. /* Custom DataTypes */
  501. for(size_t i = 0; i < config->customDataTypesSize; ++i)
  502. UA_free(config->customDataTypes[i].members);
  503. UA_free(config->customDataTypes);
  504. config->customDataTypes = NULL;
  505. config->customDataTypesSize = 0;
  506. /* Networking */
  507. for(size_t i = 0; i < config->networkLayersSize; ++i)
  508. config->networkLayers[i].deleteMembers(&config->networkLayers[i]);
  509. UA_free(config->networkLayers);
  510. config->networkLayers = NULL;
  511. config->networkLayersSize = 0;
  512. UA_String_deleteMembers(&config->customHostname);
  513. config->customHostname = UA_STRING_NULL;
  514. for(size_t i = 0; i < config->endpointsSize; ++i) {
  515. UA_SecurityPolicy *policy = &config->endpoints[i].securityPolicy;
  516. policy->deleteMembers(policy);
  517. UA_EndpointDescription_deleteMembers(&config->endpoints[i].endpointDescription);
  518. }
  519. UA_free(config->endpoints);
  520. config->endpoints = NULL;
  521. config->endpointsSize = 0;
  522. /* Certificate Validation */
  523. config->certificateVerification.deleteMembers(&config->certificateVerification);
  524. /* Access Control */
  525. config->accessControl.deleteMembers(&config->accessControl);
  526. UA_free(config);
  527. }
  528. /***************************/
  529. /* Default Client Settings */
  530. /***************************/
  531. const UA_ClientConfig UA_ClientConfig_default = {
  532. 5000, /* .timeout, 5 seconds */
  533. 10 * 60 * 1000, /* .secureChannelLifeTime, 10 minutes */
  534. UA_Log_Stdout, /* .logger */
  535. { /* .localConnectionConfig */
  536. 0, /* .protocolVersion */
  537. 65535, /* .sendBufferSize, 64k per chunk */
  538. 65535, /* .recvBufferSize, 64k per chunk */
  539. 0, /* .maxMessageSize, 0 -> unlimited */
  540. 0 /* .maxChunkCount, 0 -> unlimited */
  541. },
  542. UA_ClientConnectionTCP, /* .connectionFunc */
  543. 0, /* .customDataTypesSize */
  544. NULL, /*.customDataTypes */
  545. NULL, /*.stateCallback */
  546. #ifdef UA_ENABLE_SUBSCRIPTIONS
  547. NULL, /*.subscriptionInactivityCallback */
  548. #endif
  549. NULL, /*.clientContext */
  550. #ifdef UA_ENABLE_SUBSCRIPTIONS
  551. 10 /* .outStandingPublishRequests */
  552. #endif
  553. };