Online Forums

Technical support is provided through Support Forums below. Anybody can view them; you need to Register/Login to our site (see links in upper right corner) in order to Post questions. You do not have to be a licensed user of our product.

Please read Rules for forum posts before reporting your issue or asking a question. OPC Labs team is actively monitoring the forums, and replies as soon as possible. Various technical information can also be found in our Knowledge Base. For your convenience, we have also assembled a Frequently Asked Questions page.

Do not use the Contact page for technical issues.

Cannot connect to OPC UA Server

Start
Prev
1
Next
End

1

jkahlert
Topic Author
Offline
Elite Member

More

13 Aug 2020 12:35 #8761 by jkahlert

Replied by jkahlert on topic Cannot connect to OPC UA Server

That sounds logical - we will check it on the industrial server (which may need a few days) and inform you about the results. Thanks in advance for your sensational support!!

Please Log in or Create an account to join the conversation.

support
Offline
Moderator

More

13 Aug 2020 12:24 - 13 Aug 2020 12:25 #8760 by support

Replied by support on topic Cannot connect to OPC UA Server

Hello,

the server provides no endpoint that is compatible with the settings you have chosen.
Most likely, you need to change UAMessageSecurityModes_SecuritySign to be UAMessageSecurityModes_Secure (this is a logical OR of UAMessageSecurityModes_SecuritySign and UAMessageSecurityModes_SecuritySignAndEncrypt), because it seems to me that the endpoint with the security policy you have chosen, i.e. 'opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15 ', can only use SignAndEncrypt but not Sign.

I understand that in the Integration Objects client, you have selected Sign, and it works. But it is possible that the semantics of that setting is different: in Integratation Objects, it may mean "Sign" or anything that is *more* secure, whereas in QuickOPC you have more granular control, and if you set just one bit, that only that precise security mode is allowed. So, for SignAndEncrypt, you need UAMessageSecurityModes_SecuritySignAndEncrypt, or anything that combines it with some other mode, such as UAMessageSecurityModes_Secure, which allows both Sign and SignAndEncrypt.

For record, using AcceptAnyCertificate := true; should be restricted to testing in secure environments. It is inherently insecure to use it.

I hope this helps.

Last edit: 13 Aug 2020 12:25 by support.

Please Log in or Create an account to join the conversation.

jkahlert
Topic Author
Offline
Elite Member

More

13 Aug 2020 11:56 #8759 by jkahlert

Replied by jkahlert on topic Cannot connect to OPC UA Server

Thanks for the fast response, this is my DELPHI code:

var
Client: OpcLabs_EasyOpcUA_TLB._EasyUAClient;
ClientConfiguration: TEasyUAClientConfiguration;
AttributeData: _UAAttributeData;
begin
ClientConfiguration := TEasyUAClientConfiguration.Create(nil);
ClientConfiguration.Connect;
ClientConfiguration.SharedParameters.EngineParameters.CertificateAcceptancePolicy.AcceptAnyCertificate := true;
ClientConfiguration.AdaptableParameters.SessionParameters.UserIdentity.UserNameTokenInfo.UserName := 'Specialties/H136658';
ClientConfiguration.AdaptableParameters.SessionParameters.UserIdentity.UserNameTokenInfo.Password := '******';
ClientConfiguration.AdaptableParameters.SessionParameters.UserIdentity.X509CertificateTokenInfo.Filename := '';
ClientConfiguration.AdaptableParameters.SessionParameters.UserIdentity.X509CertificateTokenInfo.Password := '';
ClientConfiguration.AdaptableParameters.SessionParameters.EndpointSelectionPolicy.DataEncodingName := 'Binary';
ClientConfiguration.AdaptableParameters.SessionParameters.EndpointSelectionPolicy.AllowedMessageSecurityModes := UAMessageSecurityModes_SecuritySign;
ClientConfiguration.AdaptableParameters.SessionParameters.EndpointSelectionPolicy.securityPolicyUriString := 'opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15';
Client := CoEasyUAClient.Create;
Result := 0;
try
Client.Read('opc.tcp//nlrzav224:63500/infoplus21/opcua/server', 'ns=0;i=2258'); // Current time
Result := 1; // no error
except
on E: Exception do MessageDlg('Could not connect to server!' + #10#13#10#13 + 'Detailed message text:' + #10#13#10#13 +
E.Message, mtError, [mbOK], 0);
end;
...

The URL is the same as in the first screenshot, i. e. it starts with opc.tcp: as shown in the source code.

Please Log in or Create an account to join the conversation.

support
Offline
Moderator

More

13 Aug 2020 08:31 #8754 by support

Replied by support on topic Cannot connect to OPC UA Server

Hello,

can you please post here all the settings you are using? That is, anything in the EasyUAClientConfiguration object, or additional parameters in the UAEndpointDescriptor .

Also, what is the URL you are using to connect to the server? Is it the same as ion the first picture? Does it start with opc.tcp: or http: ?

Thank you

Please Log in or Create an account to join the conversation.

jkahlert
Topic Author
Offline
Elite Member

More

13 Aug 2020 08:23 - 13 Aug 2020 08:26 #8753 by jkahlert

Cannot connect to OPC UA Server was created by jkahlert

Hi,

our OPC UA Client written in DELPHI works fine with different test servers from Softing and Unified Architecture but fails when trying to connect to an industrial server. A test client from Integration Objects can connect using the following parameters (original screenshot from client):

With the same settings in our ClientConfiguration object (AdaptableParameters.SessionParameters....) we get the following error message when trying to connect: