yes "" | openssl req -x509 -newkey rsa:2048 -keyout my_private_key.pem -out my_cert.pem \
-days 355 -nodes -addext "subjectAltName = URI:urn:example.org:FreeOpcUa:python-opcua"
openssl x509 -outform der -in my_cert.pem -out my_cert.der
$BEREMIZPYTHONPATH - > >(
# Wait for server to print modified value
if [[ "$line" == 3.4 ]]; then
echo "PLC could write value"
from asyncua import ua, Server
from asyncua.server.users import User, UserRole
# Asyncua can't work without (over)simple shared cerificates/privkey.
# No user is involved in that case, but asyncua needs it.
# Over permessive User Manager hereafter helps cuting that corner.
class AllAdminUserManager:
def get_user(self, iserver, username=None, password=None, certificate=None):
return User(role=UserRole.Admin)
server = Server(user_manager=AllAdminUserManager())
host = os.environ.get("OPCUA_DEFAULT_HOST", "127.0.0.1")
endpoint = "opc.tcp://"+host+":4840/freeopcua/server/"
server.set_endpoint(endpoint)
server.set_security_policy([ua.SecurityPolicyType.Basic256Sha256_SignAndEncrypt])
await server.load_certificate("my_cert.der")
await server.load_private_key("my_private_key.pem")
uri = "http://beremiz.github.io"
idx = await server.register_namespace(uri)
objects = server.get_objects_node()
testobj = await objects.add_object(idx, "TestObject")
testvarout = await testobj.add_variable(idx, "TestOut", 1.2)
testvar = await testobj.add_variable(idx, "TestIn", 5.6)
await testvar.set_writable()
print(await testvar.get_value())
PROJECT_FILES_DIR=$BEREMIZPATH/tests/projects/opcua_client_encrypted/project_files
cp my_cert.der my_private_key.pem $PROJECT_FILES_DIR
# Start PLC with opcua test
setsid $BEREMIZPYTHONPATH $BEREMIZPATH/Beremiz_cli.py -k \
--project-home $BEREMIZPATH/tests/projects/opcua_client_encrypted build transfer run > >(
# Wait for PLC runtime to output expected value on stdout
if [[ "$line" == 1.2 ]]; then
echo "PLC could read value"
echo all subprocess started, start polling results
res=110 # default to ETIMEDOUT
if [[ -a ./SRVOK && -a ./PLCOK ]]; then
# Kill PLC and subprocess
echo will kill PLC:$PLC_PID and SERVER:$SERVER_PID