Zongsoft.Externals.Opc 0.24.0

Zongsoft.Externals.Opc Extension Plugin Library

English | 简体中文

Certificate Generation

If X509 certificates are used for authentication, use OpenSSL to generate the X509 certificate files.

💡 Note: adjust the command parameter values as needed.

Generate a Private Key

• Use the openssl genpkey command to generate an unencrypted private key file.

openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out certificate.private.pem -outform PEM

• Use the openssl genpkey command to generate an encrypted private key file. Specify the password with the -pass parameter.

openssl genpkey -algorithm RSA -aes256 -pkeyopt rsa_keygen_bits:2048 -out certificate.private.pem -outform PEM -pass pass:"password"

Create a Self-Signed Certificate

The -subj parameter contains these fields:

• CN = Common Name
• C = Country or region
• ST = State or province
• L = Locality or city
• O = Organization
• OU = Organizational unit or department

• Use the openssl req command to create a self-signed certificate with an unencrypted private key.

openssl req -new -x509 -key certificate.private.pem -days 3650 -out certificate.der -outform DER -subj "/C=CN/ST=Province|State/L=City/O=Organization/OU=Branch|Department/CN=Common Name/emailAddress=certificate@zongsoft.com"

• Use the openssl req command to create a self-signed certificate with an encrypted private key. Specify the private-key password with the -passin parameter.

openssl req -new -x509 -key certificate.private.pem -passin pass:"password" -days 3650 -out certificate.der -outform DER -subj "/C=CN/ST=Province|State/L=City/O=Organization/OU=Branch|Department/CN=Common Name/emailAddress=certificate@zongsoft.com"

Merge into a PKCS#12 File

• Use the openssl pkcs12 command to merge a certificate file without a password.

  Note: if the private key is encrypted, specify its password with the -passin parameter.

openssl pkcs12 -inkey certificate.private.pem -in certificate.der -export -out certificate.pfx -passout pass:"" -name "FriendlyName"

openssl pkcs12 -inkey certificate.private.pem -passin pass:"password" -in certificate.der -export -out certificate.pfx -passout pass:"" -name "FriendlyName"

• Use the openssl pkcs12 command to merge a certificate file with a password. Specify the certificate-file password with the -passout parameter.

  Note: if the private key is encrypted, specify its password with the -passin parameter.

openssl pkcs12 -inkey certificate.private.pem -in certificate.der -export -out certificate.pfx -passout pass:"password" -name "FriendlyName"

openssl pkcs12 -inkey certificate.private.pem -passin pass:"password" -in certificate.der -export -out certificate.pfx -passout pass:"password" -name "FriendlyName"

Plugin-Based Integration

Compose this feature through the host; a package reference supplies compile-time APIs, while plugin loading also requires deployed manifests and runtime assets. See the complete plugin workflow.

The plugin makes the OPC adapter and SDK available. Application code configures endpoints, certificate trust and session/subscription lifetimes; no OPC connection is implied by copying the manifest.

Add this fragment to an existing host .deploy (retain Main and the host’s other base manifests; do not replace the whole file):

[plugins zongsoft externals opc]
nuget:Zongsoft.Externals.Opc

Run dotnet deploy against a test deployment as explained in the workflow, with the host's framework, platform, architecture and, where needed, site. Pin compatible versions in real deployments; application dependencies such as databases, caches or commercial runtimes are still separate prerequisites.

Additional artifacts listed by the deployment manifest include Zongsoft.Externals.Opc.plugin. Retain assemblies, dependencies and satellite resource directories as well. Restart the host after deployment, check plugin loading and service/driver registration, then verify the workflow above; copied files alone do not prove that the feature is active.