Update of the PKI interface to allow runtime update

Update the PKI interface to be dynamic (certificate updates and memory persistence).

New features :

  • Create an instance of SOPC_PKIProvider from a certificate store (trusted certs, trusted CRLs, issuer certs and issuer CRLs).
  • Create an instance of SOPC_PKIProvider from S2OPC certificate lists (SOPC_CertificateList).
  • Add structures as validation profiles to configure the checks made.
  • Add a way to check the URI and the HostName.
  • Add a way to check the properties of a single certificate according to a given profile.
  • Add a way to dynamically update the PKI certificates.
  • Add a way to retrieve PKI certificates and export them to a specific store.
  • Add a way to retrieve the certificates that have been rejected by the PKI.
  • Customization is no longer possible by the user, as the implementation of the SOPC_PKIProvider structure has become private.
Edited by Robin Barrucand
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information