|
|
@@ -1,278 +0,0 @@
|
|
|
-<?xml version="1.0" encoding="utf-8"?>
|
|
|
-<ApplicationConfiguration
|
|
|
- xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
|
- xmlns:ua="http://opcfoundation.org/UA/2008/02/Types.xsd"
|
|
|
- xmlns="http://opcfoundation.org/UA/SDK/Configuration.xsd"
|
|
|
->
|
|
|
- <ApplicationName>Opc.Ua.Service</ApplicationName>
|
|
|
- <ApplicationUri>urn:localhost:Opc.Ua.Service</ApplicationUri>
|
|
|
- <ProductUri>https://Shunnet.top</ProductUri>
|
|
|
- <ApplicationType>Server_0</ApplicationType>
|
|
|
-
|
|
|
- <SecurityConfiguration>
|
|
|
-
|
|
|
- <!-- Where the application instance certificate is stored-->
|
|
|
- <ApplicationCertificate>
|
|
|
- <StoreType>Directory</StoreType>
|
|
|
- <StorePath>%CommonApplicationData%\OpcUaAutomation\pki\own</StorePath>
|
|
|
- <SubjectName>CN=Service, C=KR, S=Seoul, O=OpcUaAutomation, DC=localhost</SubjectName>
|
|
|
- </ApplicationCertificate>
|
|
|
-
|
|
|
- <!-- Where the issuer certificate are stored (certificate authorities) -->
|
|
|
- <TrustedIssuerCertificates>
|
|
|
- <StoreType>Directory</StoreType>
|
|
|
- <StorePath>%CommonApplicationData%\OpcUaAutomation\pki\issuer</StorePath>
|
|
|
- </TrustedIssuerCertificates>
|
|
|
-
|
|
|
- <!-- Where the trust list is stored -->
|
|
|
- <TrustedPeerCertificates>
|
|
|
- <StoreType>Directory</StoreType>
|
|
|
- <StorePath>%CommonApplicationData%\OpcUaAutomation\pki\trusted</StorePath>
|
|
|
- </TrustedPeerCertificates>
|
|
|
-
|
|
|
- <!-- The directory used to store invalid certficates for later review by the administrator. -->
|
|
|
- <RejectedCertificateStore>
|
|
|
- <StoreType>Directory</StoreType>
|
|
|
- <StorePath>%CommonApplicationData%\OpcUaAutomation\pki\rejected</StorePath>
|
|
|
- </RejectedCertificateStore>
|
|
|
-
|
|
|
- <!-- WARNING: The following setting (to automatically accept untrusted certificates) should be used
|
|
|
- for easy debugging purposes ONLY and turned off for production deployments! -->
|
|
|
- <AutoAcceptUntrustedCertificates>false</AutoAcceptUntrustedCertificates>
|
|
|
-
|
|
|
- <!-- WARNING: SHA1 signed certficates are by default rejected and should be phased out.
|
|
|
- The setting below to allow them is only required for UACTT (1.02.336.244) which uses SHA-1 signed certs. -->
|
|
|
- <RejectSHA1SignedCertificates>false</RejectSHA1SignedCertificates>
|
|
|
- <RejectUnknownRevocationStatus>true</RejectUnknownRevocationStatus>
|
|
|
- <MinimumCertificateKeySize>2048</MinimumCertificateKeySize>
|
|
|
- <AddAppCertToTrustedStore>false</AddAppCertToTrustedStore>
|
|
|
- <SendCertificateChain>true</SendCertificateChain>
|
|
|
-
|
|
|
- <!-- Where the User issuer certificates are stored -->
|
|
|
- <UserIssuerCertificates>
|
|
|
- <StoreType>Directory</StoreType>
|
|
|
- <StorePath>%CommonApplicationData%\OpcUaAutomation\pki\issuerUser</StorePath>
|
|
|
- </UserIssuerCertificates>
|
|
|
-
|
|
|
- <!-- Where the User trust list is stored-->
|
|
|
- <TrustedUserCertificates>
|
|
|
- <StoreType>Directory</StoreType>
|
|
|
- <StorePath>%CommonApplicationData%\OpcUaAutomation\pki\trustedUser</StorePath>
|
|
|
- </TrustedUserCertificates>
|
|
|
- </SecurityConfiguration>
|
|
|
-
|
|
|
- <TransportConfigurations></TransportConfigurations>
|
|
|
- <TransportQuotas>
|
|
|
- <OperationTimeout>600000</OperationTimeout>
|
|
|
- <MaxStringLength>1048576</MaxStringLength>
|
|
|
- <MaxByteStringLength>1048576</MaxByteStringLength>
|
|
|
- <MaxArrayLength>65535</MaxArrayLength>
|
|
|
- <MaxMessageSize>4194304</MaxMessageSize>
|
|
|
- <MaxBufferSize>65535</MaxBufferSize>
|
|
|
- <ChannelLifetime>300000</ChannelLifetime>
|
|
|
- <SecurityTokenLifetime>3600000</SecurityTokenLifetime>
|
|
|
- </TransportQuotas>
|
|
|
- <ServerConfiguration>
|
|
|
- <BaseAddresses>
|
|
|
- <ua:String>https://192.168.2.38:6688/Opc.Ua.Service</ua:String>
|
|
|
- <ua:String>opc.tcp://192.168.2.38:8866/Opc.Ua.Service</ua:String>
|
|
|
- </BaseAddresses>
|
|
|
- <!--
|
|
|
- These list the alternate addresses (via firewalls, multiple NICs etc.) that can be
|
|
|
- used to communicate with the server. The URL used by the client when calling
|
|
|
- FindServers/GetEndpoints or CreateSession will be used to filter the list of
|
|
|
- endpoints returned by checking for alternate base addresses that have a domain
|
|
|
- that matches the domain in the url provided by the client.
|
|
|
-
|
|
|
- Note that any additional domains should be listed in the server's certificate. If they
|
|
|
- are left out the client make refuse to connect because it has no way to know if the
|
|
|
- alternate domain was authorized by the server administrator.
|
|
|
- -->
|
|
|
- <!--
|
|
|
- <AlternateBaseAddresses>
|
|
|
- <ua:String>http://AlternateHostName/Service</ua:String>
|
|
|
- <ua:String>http://10.10.103.150/Service</ua:String>
|
|
|
- <ua:String>http://[2a01::626d]/Service</ua:String>
|
|
|
- </AlternateBaseAddresses>
|
|
|
- -->
|
|
|
- <SecurityPolicies>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>Sign_2</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>None_1</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#None</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>SignAndEncrypt_3</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <!-- deprecated security policies for reference only
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>Sign_2</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>SignAndEncrypt_3</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>Sign_2</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>SignAndEncrypt_3</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- -->
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>Sign_2</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Aes128_Sha256_RsaOaep</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>SignAndEncrypt_3</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Aes128_Sha256_RsaOaep</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>Sign_2</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Aes256_Sha256_RsaPss</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>SignAndEncrypt_3</SecurityMode>
|
|
|
- <SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Aes256_Sha256_RsaPss</SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>Sign_2</SecurityMode>
|
|
|
- <SecurityPolicyUri></SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- <ServerSecurityPolicy>
|
|
|
- <SecurityMode>SignAndEncrypt_3</SecurityMode>
|
|
|
- <SecurityPolicyUri></SecurityPolicyUri>
|
|
|
- </ServerSecurityPolicy>
|
|
|
- </SecurityPolicies>
|
|
|
-
|
|
|
- <MinRequestThreadCount>100</MinRequestThreadCount>
|
|
|
- <MaxRequestThreadCount>1000</MaxRequestThreadCount>
|
|
|
- <MaxQueuedRequestCount>2000</MaxQueuedRequestCount>
|
|
|
-
|
|
|
- <!-- The SDK expects the server to support the same set of user tokens for every endpoint. -->
|
|
|
- <UserTokenPolicies>
|
|
|
- <!-- 匿名登录 -->
|
|
|
- <ua:UserTokenPolicy>
|
|
|
- <ua:TokenType>Anonymous_0</ua:TokenType>
|
|
|
- <ua:SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#None</ua:SecurityPolicyUri>
|
|
|
- </ua:UserTokenPolicy>
|
|
|
-
|
|
|
- <!-- 账号密码登录 -->
|
|
|
- <ua:UserTokenPolicy>
|
|
|
- <ua:TokenType>UserName_1</ua:TokenType>
|
|
|
- <!-- passwords must be encrypted - this specifies what algorithm to use -->
|
|
|
- <ua:SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256</ua:SecurityPolicyUri>
|
|
|
- </ua:UserTokenPolicy>
|
|
|
-
|
|
|
- <!-- 证书登录 -->
|
|
|
- <ua:UserTokenPolicy>
|
|
|
- <ua:TokenType>Certificate_2</ua:TokenType>
|
|
|
- <!-- certificate possession must be proven with a digital signature - this specifies what algorithm to use -->
|
|
|
- <ua:SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256</ua:SecurityPolicyUri>
|
|
|
- </ua:UserTokenPolicy>
|
|
|
- </UserTokenPolicies>
|
|
|
- <DiagnosticsEnabled>true</DiagnosticsEnabled>
|
|
|
- <MaxSessionCount>100</MaxSessionCount>
|
|
|
- <MinSessionTimeout>10000</MinSessionTimeout>
|
|
|
- <MaxSessionTimeout>3600000</MaxSessionTimeout>
|
|
|
- <MaxBrowseContinuationPoints>10</MaxBrowseContinuationPoints>
|
|
|
- <MaxQueryContinuationPoints>10</MaxQueryContinuationPoints>
|
|
|
- <MaxHistoryContinuationPoints>100</MaxHistoryContinuationPoints>
|
|
|
- <MaxRequestAge>600000</MaxRequestAge>
|
|
|
- <MinPublishingInterval>100</MinPublishingInterval>
|
|
|
- <MaxPublishingInterval>3600000</MaxPublishingInterval>
|
|
|
- <PublishingResolution>50</PublishingResolution>
|
|
|
- <MaxSubscriptionLifetime>3600000</MaxSubscriptionLifetime>
|
|
|
- <MaxMessageQueueSize>100</MaxMessageQueueSize>
|
|
|
- <MaxNotificationQueueSize>100</MaxNotificationQueueSize>
|
|
|
- <MaxNotificationsPerPublish>1000</MaxNotificationsPerPublish>
|
|
|
- <MinMetadataSamplingInterval>1000</MinMetadataSamplingInterval>
|
|
|
- <AvailableSamplingRates>
|
|
|
- <SamplingRateGroup>
|
|
|
- <Start>5</Start>
|
|
|
- <Increment>5</Increment>
|
|
|
- <Count>20</Count>
|
|
|
- </SamplingRateGroup>
|
|
|
- <SamplingRateGroup>
|
|
|
- <Start>100</Start>
|
|
|
- <Increment>100</Increment>
|
|
|
- <Count>4</Count>
|
|
|
- </SamplingRateGroup>
|
|
|
- <SamplingRateGroup>
|
|
|
- <Start>500</Start>
|
|
|
- <Increment>250</Increment>
|
|
|
- <Count>2</Count>
|
|
|
- </SamplingRateGroup>
|
|
|
- <SamplingRateGroup>
|
|
|
- <Start>1000</Start>
|
|
|
- <Increment>500</Increment>
|
|
|
- <Count>20</Count>
|
|
|
- </SamplingRateGroup>
|
|
|
- </AvailableSamplingRates>
|
|
|
-
|
|
|
- <RegistrationEndpoint>
|
|
|
- <ua:EndpointUrl>opc.tcp://localhost:4840</ua:EndpointUrl>
|
|
|
- <ua:Server>
|
|
|
- <ua:ApplicationUri>opc.tcp://localhost:4840</ua:ApplicationUri>
|
|
|
- <ua:ApplicationType>DiscoveryServer_3</ua:ApplicationType>
|
|
|
- <ua:DiscoveryUrls>
|
|
|
- <ua:String>opc.tcp://localhost:4840</ua:String>
|
|
|
- </ua:DiscoveryUrls>
|
|
|
- </ua:Server>
|
|
|
- <ua:SecurityMode>SignAndEncrypt_3</ua:SecurityMode>
|
|
|
- <ua:SecurityPolicyUri />
|
|
|
- <ua:UserIdentityTokens />
|
|
|
- </RegistrationEndpoint>
|
|
|
-
|
|
|
- <MaxRegistrationInterval>30000</MaxRegistrationInterval>
|
|
|
- <NodeManagerSaveFile>Opc.Ua.Service.Nodes.Json</NodeManagerSaveFile>
|
|
|
- <MinSubscriptionLifetime>10000</MinSubscriptionLifetime>
|
|
|
- <MaxPublishRequestCount>20</MaxPublishRequestCount>
|
|
|
- <MaxSubscriptionCount>10000</MaxSubscriptionCount>
|
|
|
- <MaxEventQueueSize>10000</MaxEventQueueSize>
|
|
|
-
|
|
|
- <!-- see https://opcfoundation-onlineapplications.org/profilereporting/ for list of available profiles -->
|
|
|
- <ServerProfileArray>
|
|
|
- <ua:String>http://opcfoundation.org/UA-Profile/Server/StandardUA2017</ua:String>
|
|
|
- <ua:String>http://opcfoundation.org/UA-Profile/Server/DataAccess</ua:String>
|
|
|
- <ua:String>http://opcfoundation.org/UA-Profile/Server/Methods</ua:String>
|
|
|
- </ServerProfileArray>
|
|
|
-
|
|
|
- <ShutdownDelay>5</ShutdownDelay>
|
|
|
- <ServerCapabilities>
|
|
|
- <ua:String>DA</ua:String>
|
|
|
- </ServerCapabilities>
|
|
|
- <SupportedPrivateKeyFormats>
|
|
|
- <ua:String>PFX</ua:String>
|
|
|
- <ua:String>PEM</ua:String>
|
|
|
- </SupportedPrivateKeyFormats>
|
|
|
- <MaxTrustListSize>0</MaxTrustListSize>
|
|
|
- <MultiCastDnsEnabled>false</MultiCastDnsEnabled>
|
|
|
-
|
|
|
- </ServerConfiguration>
|
|
|
-
|
|
|
- <TraceConfiguration>
|
|
|
- <OutputFilePath>%LocalApplicationData%/log/Opc.Ua.Service.log.txt</OutputFilePath>
|
|
|
- <DeleteOnLoad>true</DeleteOnLoad>
|
|
|
- <!-- Show Only Errors -->
|
|
|
- <!-- <TraceMasks>1</TraceMasks> -->
|
|
|
- <!-- Show Only Security and Errors -->
|
|
|
- <!-- <TraceMasks>513</TraceMasks> -->
|
|
|
- <!-- Show Only Security, Errors and Trace -->
|
|
|
- <!-- <TraceMasks>515</TraceMasks> -->
|
|
|
- <!-- Show Only Security, COM Calls, Errors and Trace -->
|
|
|
- <!-- <TraceMasks>771</TraceMasks> -->
|
|
|
- <!-- Show Only Security, Service Calls, Errors and Trace -->
|
|
|
- <!-- <TraceMasks>523</TraceMasks> -->
|
|
|
- <!-- Show Only Security, ServiceResultExceptions, Errors and Trace -->
|
|
|
- <!-- <TraceMasks>519</TraceMasks> -->
|
|
|
- </TraceConfiguration>
|
|
|
-
|
|
|
-</ApplicationConfiguration>
|