OPC-UA
Description
This data sink can be used to write values to an OPC-UA server. The sink supports both signed/encrypted and unencrypted communication.
To establish connections using a Sign or Sign & Encrypt security mode,
the extension service needs a writable OPC-UA security directory.
If the configured keystore file does not exist yet, StreamPipes creates a client certificate
and PKCS#12 keystore automatically on first use.
The following environment variables control that location and certificate identity:
- SP_OPCUA_SECURITY_DIR the directory where the keystore and trusted certificates are located
- SP_OPCUA_KEYSTORE_FILE the keystore file to create or reuse (e.g., keystore.pfx, must be of type PKCS12)
- SP_OPCUA_KEYSTORE_PASSWORD the password to the keystore
- SP_OPCUA_APPLICATION_URI the application URI used by the client to identify itself
Certificate requirements:
The X509 certificate must provide the following extras:
- Key Usage: Certificate Sign
- Subject Alternative Name: Application URI
- Basic Constraints: Must provide CA:FALSE when using a self-signed certificate
- Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication
The directory layout of the SP_OPCUA_SECURITY_DIR look as follows:
SP_OPC_SECURITY_DIR/
├─ pki/
│ ├─ issuers/
│ ├─ rejected/
│ ├─ trusted/
│ │ ├─ certs/
│ │ ├─ crl/
Trusted server certificates are managed in the pki directory.
Rejected certificates are stored in the rejected folder.
Required input
This sink does not have any requirements and works with any incoming event type.
Configuration
Hostname
The hostname of the OPC-UA server.
Port
The port of the OPC-UA server.
Security Mode
Can be either None, Signed or Signed & Encrypt
Security Policy
Choose one of the OPC-UA security policies or None
User Authentication
Choose whether you want to connect anonymously or authenticate using your credentials.
Anonymous: No further information required
Username/Password: Insert your username and password to access the OPC UA server
Namespace Index
The namespace index in which the node should be written
Node Id
The node id of the resulting node
Number Mapping
The property of the event that should be written to the OPC-UA server