HTTP Server using Windows Certificate store

Discussion about security topics in WinCC OA!
Search

Post Reply
4 posts • Page 1 of 1
erik.schwing
Posts: 16
Joined: Tue Feb 12, 2019 6:59 am

HTTP Server using Windows Certificate store

Post by erik.schwing »

According to the help the config entry 'securityMode = "WINCERT" ' should be valid for the HTTP Server to use the windows certificate store.

After configuring the securityMode, winCert and winRootCA entries under general it works for the mxProxy but not the HTTP Server.
The HTTP server keeps using the 'certificate.pem' and 'privkey.pem' files.

I have tried placing the config options under [general], [httpServer] and [webClient] with no difference in outcome.

Am I forgetting a step somewhere to get the HTTP Server to use the windows certificates?

User avatar
kilianvp
Posts: 422
Joined: Fri Jan 16, 2015 10:29 am

Re: HTTP Server using Windows Certificate store

Post by kilianvp »


erik.schwing
Posts: 16
Joined: Tue Feb 12, 2019 6:59 am

Re: HTTP Server using Windows Certificate store

Post by erik.schwing »

Hey Killian,

Thats exactly what i did togheter with securityMode = "WINCERT".
If the privkey.pem file is missing the ctrl manager gives an error. If i check the browser it always shows the default certificate.
It seems the HTTP ignores the config entries?

gschijndel
Posts: 330
Joined: Tue Jan 15, 2019 3:12 pm

Re: HTTP Server using Windows Certificate store

Post by gschijndel »

Although the documentation page title suggests it also would work for the HTTP server, these config entries are mentioned only in the 'Multiplexing Proxy' part.

Post Reply
4 posts • Page 1 of 1