Hello,
thank you for the files.

In "Obj.pcapng", packet #114, the CraeteSessionResponse from the server contains an empty array of server endpoints:



This violates the OPC UA specification: reference.opcfoundation.org/v104/Core/docs/Part4/5.6.2/



The word "shall" is a term that means that a compliant OPC server/client *must* do what the spec says. So the server must provide the endpoints, and we (the client) must make the check, "if [...] used a DiscoveryEndpoint to fetch the EndpointDescriptions." - which is what we have used.

UaExpert can probably get around this requirement and remain compliant by saying that they have not "used a DiscoveryEndpoint to fetch the EndpointDescriptions" at the time of the connection - they have done it earlier, upfront... But that does not make the *server* compliant.

The serverUri used in CreateSession is: www.FagorAutomation.com/machines/FagorCnc

You need to send this information to the server vendor and ask them to fix it.
If doing so it would not give you what you want, we may think of providing an extra setting to turn off the check on our side - with you taking the risk of being not OPC compliant (security!). It is also questionable whether it would be feasible, because the code that does the check is buried inside the OPC UA .NET stack/SDK from OPC Foundation that we are using.

Best regards

Hello,
do you have that in one of the actual Wireshark format, such as .PCAPNG ? That's how it gets normally saved. What you have sent is some kind of export which I cannot analyze easily.


Regards

Yes, thank.

I wanted to determine whether UaExpert and our demo app connects to the same server endpoints (with the same security configuration), and the likely answer is yes, because you are selecting "none" in UaExpert, and that is what the demo app prefers to choose as well.

The error message comes from the OPC Foundation .UA NET stack, and basically means that although the client could connect, it thinks that if it does so, it would be a security risks. In order to figure out what precisely is wrong (and therefore possibly come with some suggestion or workaround), I would need to see the contents of the client-server communication. This can be done using Wireshark:

• Analyzing OPC UA Communications with Wireshark: opcconnect.opcfoundation.org/2017/02/analyzing-opc-ua-communications-with-wireshark/


• OPC UA & Wireshark: www.prosysopc.com/blog/opc-ua-wireshark/

Will you be able&willing to collect the communication between the demo app and the server?

Regards

Thank you.
Can you post here which endpoints are offered to you by UaExpert, and which one have you chosen?

Below is an screenshot - with a different server - of the part of UaExpert dialog that I have in mind. Can you post the same picture from connecting to your server, and if there is more than one entry, tell me which one you are using?

Hello,

attachments are missing.

Regards