certificate folders for a server
Posted: 09 Dec 2020, 19:40
I have a server based on the server_cpp_demo example project in the cppsdkbundle. I changed it to use certificate-based authentication. I am manually configuring the client certificates with the server. I'll use the LDS server after i have this working.
I don't understand a behavior that I see. I can create a certificate using the UaExpert Manage Certificates dialog and copy the .der file to the server at locations [ConfigPath]/pkiuser/trusted/certs/ and also into folder [ConfigPath]/pkiserver/trusted/certs/. This configuration works.
But if I remove the .DER file from either one of those folders, authentication does not work. it must be in both folders for the client to authenticate.
I don't expect the server to require the same cert in two folders. What am i missing?
Note that in the future I plan to push certificates onto the server using GDS.
I don't understand a behavior that I see. I can create a certificate using the UaExpert Manage Certificates dialog and copy the .der file to the server at locations [ConfigPath]/pkiuser/trusted/certs/ and also into folder [ConfigPath]/pkiserver/trusted/certs/. This configuration works.
But if I remove the .DER file from either one of those folders, authentication does not work. it must be in both folders for the client to authenticate.
I don't expect the server to require the same cert in two folders. What am i missing?
Note that in the future I plan to push certificates onto the server using GDS.