Certificate problem with a Wittmann Robot

Questions regarding the use of the UaExpert.

Moderator: uaexpert

Post Reply
gcarrier
Jr. Member
Jr. Member
Posts: 1
Joined: 06 Jan 2021, 13:43

Certificate problem with a Wittmann Robot

Post by gcarrier »

Hi,

I have the following error when I try to connect to my robot Wittmann R9:

BadCertificateChainIncomplete

Can I modify the Certificate or do I need to conctat Wittmann?

I was able to connect to an Arburg IMM.

Thanks.

User avatar
Support Team
Hero Member
Hero Member
Posts: 3064
Joined: 18 Mar 2011, 15:09

Re: Certificate problem with a Wittmann Robot

Post by Support Team »

Hello,

the crutial question here is: does the Wittmann Robot have a CertificateChain or not?

a) If yes, the chain must be complete in order to be validated by the client (UaExpert).
b) If not, the application instance certificate of the Wittmann Robot is probably setting wrong parameters (in certificate usage flags, issuer information), and by this claim to have a certificate chain, but only having a simple leaf certificate.

In a) you must trust the chain (and the elements thereof), so that the intermediate issuers and the root are known and correctly trusted by the UaExpert.
In b) you need to contact Wittmann and ask for help to create correct application instance certificate for this robot (including correct setting of the certificate usage flags, and other parameters within the certificate).

NOTE: in UaExpert you can (temporarily) ignore errors in the certificate, just to get the connection going. However, on the long run, and for productive security configuration the certificates should be configured and used correctly.
Best regards
Unified Automation Support Team

Post Reply