R1.05 re-check: installation-security, data-access, equipment #27

Merged
cliu merged 8 commits from docs/r105-recheck-install-access-equipment into main 2026-10-08 19:13:20 +11:00
2 changed files with 7 additions and 6 deletions
Showing only changes of commit 9f300bd07b - Show all commits

View file

@ -49,8 +49,8 @@ For a server that other projects use, where CI Server must not be restarted:
Copy the whole sample folder to a temporary folder on the server, run from there, and delete Copy the whole sample folder to a temporary folder on the server, run from there, and delete
it afterwards. Also delete `%TLS_LOG_PATH%\OPXCIENG.log`. The OPC UA certificate exchange and it afterwards. Also delete `%TLS_LOG_PATH%\OPXCIENG.log`. The OPC UA certificate exchange and
its undo are user steps (see below); the client's own certificate `<host>_OPXCIENG.der/.pem` its undo are user steps (see below); the client's own certificate `<host>_OPXCIENG.der/.pem`
and the trusted copies stay in the `pki` folders and in `OPCUAC_PKI_CERTIFICATES_DF` until the and the trusted copies stay in the `pki` folders (and in `OPCUAC_PKI_CERTIFICATES_DF`, which
user deletes them. follows the files) until they are deleted; the server-side `pkiserver ejected` folder is created by the test.
## Current contents ## Current contents

View file

@ -95,7 +95,8 @@ is removed again afterwards. Scripts: `examples/CI-Eng-Sample/shared/`.
- Remove: 0 errors. Before/after snapshot: all datasets identical (count and name hash), no - Remove: 0 errors. Before/after snapshot: all datasets identical (count and name hash), no
`CIENG*` record left. Left over and cleaned: 34 `dss_*.tmp` files in `tls\lst` (ISS-091), `CIENG*` record left. Left over and cleaned: 34 `dss_*.tmp` files in `tls\lst` (ISS-091),
`OPXCIENG.log`, the temporary sample copy. `OPXCIENG.log`, the temporary sample copy.
- **User step still open:** the certificate files of the test (client own certificate - Certificates: the test's files (client own certificate `<host>_OPXCIENG.der/.pem`, the
`<host>_OPXCIENG.der/.pem`, the server certificate trusted in the client store, the client server certificate trusted in the client store, the client certificate trusted in the
certificate trusted in the server store) and their 2 extra `OPCUAC_PKI_CERTIFICATES_DF` server store) and the `pkiserver\rejected` folder created by the test were deleted with the
records. Claude is not allowed to change the certificate stores. user's approval. `OPCUAC_PKI_CERTIFICATES_DF` went back from 3 to 1 record by itself: the
dataset follows the certificate files. The server is back in its original state.