Configuration block for setting up secured communication with the OPC UA server.

Application Instance Certificate

To use Secured communication, an application instance certificate must be provided. The subjectAltName in the certificate must contain a URI equal to the applicationUri given in the Client instance.

Generated Certificate

If the useGeneratedApplicationCertificate parameter is set to true, the simulation will generate an application certificate automatically. The subject will contain:

• CN set to "Wolfram OPCUA Library"
• O set from the organization parameter

The subjectAltName will contain:

• URI set from the applicationUri parameter in the Client instance

The generated certificate will have an expiration date expirInDays days from the generation date, and it will be saved in the directory specified by applicationCertificateDirectory. The certificate will be regenerated whenever applicationUri, organization or expireInDays changes.

Custom Certificate

To use a custom application certificate, set the useGeneratedApplicationCertificate parameter to false and specify the certifcate and key using the following parameters:

• applicationCertificatePath: path to the certificate file
• applicationPrivateKeyPath: path to the private key file

The private key has to be passwordless.

Certificate validation

By default, all server certificates are accepted. To perform verification of server certificates, set the trustedCertificatePath parameter to the trusted server certificate or to the CA certificate that was used to sign the server certificate. If the certificate given by the trustedCertificatePath parameter is a CA certificate, the corresponding certificate revocation list must be proved by the revocationListPath parameter (otherwise certificate verification will fail).