OPC UA 1.05 ECC-preview

1.05.375 ECC-preview Release

This release is based on the 1.05.03 Nodeset with generated files from the ModelCompiler.
The focus in this release was on Elliptic Curve Cryptography (ECC) support.

ECC support

• Changes to applications configuration
• Configuration permits specifying multiple application certificate types details
• Bacword compatibility with existing configurations - meaning no ECC just RSA encryption support
• Further details can be found here

Known Limitations

Not all curves are supported by all OS platforms and not all .NET implementations offer cryptographic API support for all curve types.
Due to these limitations, the support for ECC profiles is available starting with the following target platforms: .NET 4.8, .NET standard 2.1 and .NET 5 and above.
The supported ECC curve types are the following:

• NistP256 for ECC certificates with NIST P256 curve
• NistP384 for ECC certificates with NIST P384 curve
• BrainpoolP256r1 for ECC certificates with Brainpool P256r1 curve
• BrainpoolP384r1 for ECC certificates with Brainpool P384r1 curve

Released packages

OPCFoundation.NetStandard.Opc.Ua
OPCFoundation.NetStandard.Opc.Ua.Core
OPCFoundation.NetStandard.Opc.Ua.Security.Certificates
OPCFoundation.NetStandard.Opc.Ua.Configuration
OPCFoundation.NetStandard.Opc.Ua.Server
OPCFoundation.NetStandard.Opc.Ua.Client
OPCFoundation.NetStandard.Opc.Ua.Client.ComplexTypes
OPCFoundation.NetStandard.Opc.Ua.Bindings.Https
OPCFoundation.NetStandard.Opc.Ua.PubSub

What's Changed

• Fix special case for reconnect without activate by @mregen in #2643
• Bump Serilog.Sinks.Console and System.Diagnostics.DiagnosticSource by @dependabot in #2642
• Make X509CertificateStore support CRLs on Windows by @romanett in #2571
• [Client] add null check to avoid warning message when checking Security Level for anonymous user token by @romanett in #2646
• Bump Microsoft.IO.RecyclableMemoryStream from 3.0.0 to 3.0.1 by @dependabot in #2649
• Bump Serilog.Sinks.Debug and System.Diagnostics.DiagnosticSource by @dependabot in #2650
• Bump docker/build-push-action from 5 to 6 by @dependabot in #2647
• Bump Serilog.Expressions and System.Diagnostics.DiagnosticSource by @dependabot in #2648
• Fix macOS build, move https client transport back to core and other maintenance, by @mregen in #2659
• Fix NullReference in XmlDecoder.ReadExpandedNodeId by @JSGInray in #2636
• Bump Serilog.Sinks.File and System.Diagnostics.DiagnosticSource by @dependabot in #2654
• [Client] Compute time intervals independent of System Time changes by @mrsuciu in #2639
• Fix exception in TcpTransportlistener OnAccept call by @mregen in #2661
• Fuzzing issues found in June by @mregen in #2663
• Fix: RegisterServer and RegisterServer2 do not initiate connection by @MD-V in #2664
• Create 1.5.375-ECC-preview by @mrsuciu in #2667

Full Changelog: 1.5.374.61-preview...1.5.375.71-ECC-preview