Re: [milo-dev] Security issue

[Isuru Samaraweera <isuru@xxxxxxxx>]

It worked Keven..Had to download jce libs as well.

One more clarification needed

If client and server is in two machines ..Do we need to copy these in both client and server or is it only in server so that you have ephemeral key based encryption?

Thanks

On Tue, Nov 14, 2017 at 7:01 PM, Kevin Herron <kevinherron@xxxxxxxxx> wrote:

When the example server starts it logs about a temporary security directory.

Inside this directory you'll find 3 folders. You need to move the certificate of any client that attempts to connect from "rejected" to "trusted" folder.

On Mon, Nov 13, 2017 at 10:39 PM, Isuru Samaraweera <isuru@xxxxxxxx> wrote:

Hi All,

 I am new to Milo code base.I tried running BrowseNodeExample.java enabling security policy to SecurityPolicy.Basic256Sha256 in ClientExample. example-certs are on the class path.However I got the below error while running the example on Milo.

Please let me know what has gone wrong.

java.util.concurrent.ExecutionException: UaException: status=Bad_SecurityChecksFailed, message=security checks failed

at java.util.concurrent.CompletableFuture.reportGet(Unknown Source)

at java.util.concurrent.CompletableFuture.get(Unknown Source)

at com.yukon.opc.testclient.BrowseNodeExample.run(BrowseNodeExample.java:40)

at com.yukon.opc.testclient.ClientExampleRunner.run(ClientExampleRunner.java:107)

at com.yukon.opc.testclient.BrowseNodeExample.main(BrowseNodeExample.java:32)

Caused by: UaException: status=Bad_SecurityChecksFailed, message=security checks failed

at com.yukon.opc.stack.client.handlers.UaTcpClientAcknowledgeHandler.onError(UaTcpClientAcknowledgeHandler.java:232)

at com.yukon.opc.stack.client.handlers.UaTcpClientAcknowledgeHandler.decode(UaTcpClientAcknowledgeHandler.java:128)

at io.netty.handler.codec.ByteToMessageCodec$1.decode(ByteToMessageCodec.java:42)

at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:387)

at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:245)

at io.netty.handler.codec.ByteToMessageCodec.channelRead(ByteToMessageCodec.java:103)

at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:292)

at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:278)

at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:962)

at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:131)

at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:528)

at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:485)

at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:399)

at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:371)

at io.netty.util.concurrent.SingleThreadEventExecutor$2.run(SingleThreadEventExecutor.java:112)

at java.lang.Thread.run(Unknown Source)

Thanks,

Isuru

_______________________________________________
milo-dev mailing list
milo-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/milo-dev

_______________________________________________
milo-dev mailing list
milo-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/milo-dev