dominikriemer opened a new issue, #3710:
URL: https://github.com/apache/streampipes/issues/3710

   ### Body
   
   Currently, each extension service manages OPC-UA certificates separately. In 
case of rejected certificates, they must be manually put into the `trusted` 
folder.
   
   To improve usability and maintenance of the OPC-UA connector, we plan to 
extend the mechanism as follows:
   * An extension service that connect to OPC-UA using a `Sign` or 
`Sign&Encrypt` security mode receives trusted certificates from the Core
   * The extension service validates the certificate chain by using a 
combination of locally stored trusted certificates and the ones received from 
the Core
   * In case no trusted certificate is found, the certificate is sent to the 
Core.
   * In the StreamPipes UI, users can inspect OPC-UA certificates and manually 
move them from`rejected` to `trusted` and vice versa
   
   ### StreamPipes Committer
   
   I acknowledge that I am a maintainer/committer of the Apache StreamPipes 
project.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to