Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Connecting with all Security None to opcplc 2.5.0 running in EFLOW VM form host system fails

See original GitHub issue

This issue is for a: (mark with an `x`)

- [x] bug report -> please search issues before submitting
- [ ] feature request
- [ ] documentation issue or request
- [ ] regression (a behavior that used to work and stopped in a new release)

Minimal steps to reproduce

Run OPpcPlc 2.5.0 in EFLOW with the following settings:

   "opcplc1": {
        "settings": {
            "image": "localhost:5500/opc-plc:2.5.0",
            "createOptions": {
                "Hostname": "opcplc1",
                "Cmd": [
                    "--sph",
                    "--aa",
                    "--unsecuretransport",
                    "--fr=1",
                    "--sr=2",
                    "--ph=opcplc1",
                    "--to"
                ],
                "ExposedPorts": {
                    "50000/tcp": {},
                    "8080/tcp": {}
                },
                "HostConfig": {
                    "Mounts": [
                        {
                            "Type": "volume",
                            "Target": "/appdata",
                            "Source": "opcplc1",
                            "Consistency": "consistent",
                            "RW": true
                        }
                    ],
                    "PortBindings": {
                        "50000/tcp": [
                            {
                                "HostPort": "50000"
                            }
                        ],
                        "8080/tcp": [
                            {
                                "HostPort": "8080"
                            }
                        ]
                    }
                }
            }
        },
        "env": {
            "BypassCertVerification": {
                "value": "true"
            },
            "AutoAcceptUntrustedCertificates": {
                "value": "true"
            }
        },
        "type": "docker",
        "version": "1.0",
        "status": "running",
        "restartPolicy": "always",
        "startupOrder": 2
    },

Get the EFLOW-VM IP-Address

Get-EflowVmAddr

 - Virtual machine IP : 172.27.71.63 retrieved directly from virtual machine

Use an OPC UA Client such as Softing dataFEED OPC UA Client: Endpoint URL: opc.tcp://172.27.71.63:50000 Security Mode: None Secuity Policy: None Message Encoding: Binary

Try to connect from the client with the settings above fails with error:

Any log messages given by the failure

Error in Client:

2022-10-06 19:36:17.729 [17], TraceMask:Error, Message: BadCertificateHostNameInvalid ObjectId: SessionConnectViewModel BadCertificateHostNameInvalid 'BadCertificateHostNameInvalid'
2022-10-06 19:36:17.729 [17], TraceMask:Error, Message: ClientSession.InternalConnect - Session Connect error  BadCertificateHostNameInvalid 'BadCertificateHostNameInvalid'

docker logs opcplc1 in EFLOW VM:

[17:36:16 ERR] OPC: Certificate rejected. Reason=CN=OpcPlc. [CN=OpcPlc] [BB1A26C8C5CFC4A348A660D70478107CCE9ACE47]
[17:36:16 ERR] OPC: 10/06/2022 17:36:16.487 Certificate rejected. Reason=Opc.Ua.ServiceResultException: The domain '172.27.71.63' is not listed in the server certificate.. [CN=OpcPlc] [BB1A26C8C5CFC4A348A660D70478107CCE9ACE47]
[17:36:16 ERR] OPC: Server - SESSION CREATE failed. The domain '172.27.71.63' is not listed in the server certificate.
[17:36:16 ERR] OPC: 10/06/2022 17:36:16.488 Server - SESSION CREATE failed. The domain '172.27.71.63' is not listed in the server certificate.
[17:36:16 ERR] OPC: SERVER - Service Fault Occurred. Reason=BadCertificateHostNameInvalid
[17:36:16 ERR] OPC: 10/06/2022 17:36:16.488 SERVER - Service Fault Occurred. Reason=BadCertificateHostNameInvalid
[17:36:16 ERR] OPC: Certificate rejected. Reason=CN=OpcPlc. [CN=OpcPlc] [BB1A26C8C5CFC4A348A660D70478107CCE9ACE47]
[17:36:16 ERR] OPC: 10/06/2022 17:36:16.490 Certificate rejected. Reason=Opc.Ua.ServiceResultException: The domain '172.27.71.63' is not listed in the server certificate.. [CN=OpcPlc] [BB1A26C8C5CFC4A348A660D70478107CCE9ACE47]
[17:36:16 ERR] OPC: Server - SESSION CREATE failed. The domain '172.27.71.63' is not listed in the server certificate.
[17:36:16 ERR] OPC: 10/06/2022 17:36:16.493 Server - SESSION CREATE failed. The domain '172.27.71.63' is not listed in the server certificate.
[17:36:16 ERR] OPC: SERVER - Service Fault Occurred. Reason=BadCertificateHostNameInvalid
[17:36:16 ERR] OPC: 10/06/2022 17:36:16.494 SERVER - Service Fault Occurred. Reason=BadCertificateHostNameInvalid

Expected/desired behavior

With Opc-Plc 2.2.0 the and the exact same deployment template a connection with None/None form outside works. Therefore I expect that it would work the same with version 2.5.0 as with 2.2.0.