how to make client store a rejected server certificate

Questions regarding the use of the C++ SDK for Server or Client development or integration into customer products ...

Moderator: uasdkcpp

Post Reply
jgraham@traclabs.com
Jr. Member
Jr. Member
Posts: 2
Joined: 25 May 2015, 18:02

how to make client store a rejected server certificate

Post by jgraham@traclabs.com »

Hello,

I have C++ Client configured to initially reject a server's certificate. The client closely copies the sdk client example.
What is the code to save the server certificate in the client's reject folder, so that after it is manually moved to trusted the connection will succeed the next time?

Kind Regards and Thank you in advance!

jgraham@traclabs.com
Jr. Member
Jr. Member
Posts: 2
Joined: 25 May 2015, 18:02

Re: how to make client store a rejected server certificate

Post by jgraham@traclabs.com »

Anyone?

User avatar
Support Team
Hero Member
Hero Member
Posts: 3069
Joined: 18 Mar 2011, 15:09

Re: how to make client store a rejected server certificate

Post by Support Team »

Please do not ask questions to the support and post the same questions here in the forum in parallel.
Best regards
Unified Automation Support Team

pepone
Jr. Member
Jr. Member
Posts: 2
Joined: 14 Sep 2017, 19:42

Re: how to make client store a rejected server certificate

Post by pepone »

Hello,

it would be great if you post the solution here.

Thanks a lot

User avatar
Support Team
Hero Member
Hero Member
Posts: 3069
Joined: 18 Mar 2011, 15:09

Re: how to make client store a rejected server certificate

Post by Support Team »

First of all you need to get the certificate from the server. ClientLesson 4 shows how that can be done (See method connectSecure() - GetEndpoints).
To save a certificate to a file you can use UaPkiCertificate::toDERFile(filename) and save it to any location you like.
Best regards
Unified Automation Support Team

pepone
Jr. Member
Jr. Member
Posts: 2
Joined: 14 Sep 2017, 19:42

Re: how to make client store a rejected server certificate

Post by pepone »

Thank you very much!

For the Filename we use thumbPrint().toHex() from UaPkiCertificate.

Post Reply