From 9f300bd07b9bdad7a59215aeca639f4ea2a6b2a8 Mon Sep 17 00:00:00 2001 From: cliu Date: Thu, 8 Oct 2026 19:12:13 +1100 Subject: [PATCH] R1.05 V4: test certificates removed, server back to original state Co-Authored-By: Claude Opus 5.5 --- examples/CI-Eng-Sample/README.md | 4 ++-- knowledge/r105-verification.md | 9 +++++---- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/examples/CI-Eng-Sample/README.md b/examples/CI-Eng-Sample/README.md index e510549..11eeba1 100644 --- a/examples/CI-Eng-Sample/README.md +++ b/examples/CI-Eng-Sample/README.md @@ -49,8 +49,8 @@ For a server that other projects use, where CI Server must not be restarted: Copy the whole sample folder to a temporary folder on the server, run from there, and delete it afterwards. Also delete `%TLS_LOG_PATH%\OPXCIENG.log`. The OPC UA certificate exchange and its undo are user steps (see below); the client's own certificate `_OPXCIENG.der/.pem` -and the trusted copies stay in the `pki` folders and in `OPCUAC_PKI_CERTIFICATES_DF` until the -user deletes them. +and the trusted copies stay in the `pki` folders (and in `OPCUAC_PKI_CERTIFICATES_DF`, which +follows the files) until they are deleted; the server-side `pkiserver ejected` folder is created by the test. ## Current contents diff --git a/knowledge/r105-verification.md b/knowledge/r105-verification.md index 6e84138..fd77f85 100644 --- a/knowledge/r105-verification.md +++ b/knowledge/r105-verification.md @@ -95,7 +95,8 @@ is removed again afterwards. Scripts: `examples/CI-Eng-Sample/shared/`. - Remove: 0 errors. Before/after snapshot: all datasets identical (count and name hash), no `CIENG*` record left. Left over and cleaned: 34 `dss_*.tmp` files in `tls\lst` (ISS-091), `OPXCIENG.log`, the temporary sample copy. -- **User step still open:** the certificate files of the test (client own certificate - `_OPXCIENG.der/.pem`, the server certificate trusted in the client store, the client - certificate trusted in the server store) and their 2 extra `OPCUAC_PKI_CERTIFICATES_DF` - records. Claude is not allowed to change the certificate stores. +- Certificates: the test's files (client own certificate `_OPXCIENG.der/.pem`, the + server certificate trusted in the client store, the client certificate trusted in the + server store) and the `pkiserver\rejected` folder created by the test were deleted with the + user's approval. `OPCUAC_PKI_CERTIFICATES_DF` went back from 3 to 1 record by itself: the + dataset follows the certificate files. The server is back in its original state.