Qt OPC UA X509 Support▲
This example shows how client applications can generate their own self-signed certificate or generate a certificate signing request.
Generating RSA key▲
At first, an RSA key is generated:
Sélectionnez
QOpcUaKeyPair key;
key.generateRsaKey(QOpcUaKeyPair::RsaKeyStrength::Bits2048);The private key can be saved to a file for further usage:
Sélectionnez
QByteArray keyData = key.privateKeyToByteArray(QOpcUaKeyPair::Cipher::Unencrypted, QString());
QFile keyFile(u"privateKey.pem"_s);
keyFile.open(QFile::WriteOnly);
keyFile.write(keyData);
keyFile.close();Generating certificate signing requests▲
Next, a certificate signing request is created. It is also necessary to set the subject of the certificate and add all the extensions needed for OPC UA.
Sélectionnez
QOpcUaX509CertificateSigningRequest csr;
// Set the subject of the certificate
QOpcUaX509DistinguishedName dn;
dn.setEntry(QOpcUaX509DistinguishedName::Type::CommonName, u"QtOpcUaViewer"_s);
dn.setEntry(QOpcUaX509DistinguishedName::Type::CountryName, u"DE"_s);
dn.setEntry(QOpcUaX509DistinguishedName::Type::LocalityName, u"Berlin"_s);
dn.setEntry(QOpcUaX509DistinguishedName::Type::StateOrProvinceName, u"Berlin"_s);
dn.setEntry(QOpcUaX509DistinguishedName::Type::OrganizationName, u"The Qt Company"_s);
csr.setSubject(dn);Now there are two options:
1. When you need to get your certificate signing request signed by a certificate authority, you have to use the request data.
Sélectionnez
QByteArray certificateSigningRequestData = csr.createRequest(key);2. When there is no certificate authority, you have to self-sign the request.
Sélectionnez
QByteArray selfSignedCertificateData = csr.createSelfSignedCertificate(key);