Security

locka99 edited this page Nov 14, 2017 · 2 revisions

OPC UA for Rust supports encrypted communication between client and server, pki trust between client & server, and anonymous and user/password user identity tokens.

All of these are defined on a per-endpoint basis, either programmatically or via configuration.

Encryption

The server supports endpoints with the standard message security modes:

None - no encryption
Sign - no encryption but messages are digitally signed to ensure integrity
SignAndEncrypt - signed messages which are then encrypted

The following security policies are supported.

None, i.e. no encryption or signing
Basic128Rsa15
Basic256
Basic256Rsa256

User identities

The server supports the following user identities

Anonymous, i.e. no authentication
User/password - plaintext password only