Re: [milo-dev] Milo component in Camel 3.20.1 project

[KARTHIK PRABHU N <karthikprabhu77@xxxxxxxxx>]

Hello Kevin,

Could you please let me know how we can configured camel user to configure trusted certificate ? 

In our case, camel interface is jar file and we are passing truststore using mvn parameter.

Thanks

Karthik 

On Thu, 9 Mar, 2023, 10:33 pm KARTHIK PRABHU N, <karthikprabhu77@xxxxxxxxx> wrote:

Hello Kevin,

Sorry for the typos in the previous email.

Yes, we have configured CA certificates used by OPC UA server at client side in a truststore but still issue persist. 

Correct me if I am wrong.

Thanks,

Karthik 

On Thu, 9 Mar, 2023, 9:55 pm Kevin Herron, <kevinherron@xxxxxxxxx> wrote:

Karthik,

This likely means you've configured the Milo/Camel client integration to use an instance of InsecureValidator: https://github.com/eclipse/milo/blob/c66275786686c0c5308b11048153f397a739e36b/opc-ua-stack/stack-client/src/main/java/org/eclipse/milo/opcua/stack/client/security/ClientCertificateValidator.java#L29-L52

You can replace this with your own that doesn't log, or ideally you provide a way for Camel users to configure trusted server certificates.

This doesn't have anything to do with SSL/TLS certificates, it involves the OPC UA application instance certificates that each OPC UA client or server application must have when using security.

On Wed, Mar 8, 2023 at 10:34 PM KARTHIK PRABHU N <karthikprabhu77@xxxxxxxxx> wrote:

Hello All, 

Hope you are doing well ! 

We have a camel interface deployed in two seperate VM connecting to OPC UA server via load balancer ( as there are two nodes at OPC UA). The connection is established using SSL / TLS and as per the server team our certification are moved to trusted repository. 

We still receiving warning message "Skipping validation for certificate" from OPC UA   in application log when connection is established. This message are continuously as connection is maintained frequently using Milo client. 

We are not sure about the timeline from when we started receiving this message.

Tried with new set of certificate with SAN entry including load balancer FQDN.

Could you please let us know why we are getting this error?

Highly appropriate your response.

Thank you!

Karthik 

_______________________________________________
milo-dev mailing list
milo-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/milo-dev

_______________________________________________
milo-dev mailing list
milo-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/milo-dev