TLS client

Creating a TLS client is exactly the same process as a TCP client, except that an extra TlsClientConfig is required. For more details about TLS support and the configuration options, check the TLS general information page.

Certificate authority-based configuration

Rust

let config = TlsClientConfig::full_pki(
    Some(domain.to_string()),
    ca_cert,
    entity_cert,
    entity_key,
    None, // no password
    MinTlsVersion::V12,
)?;

let channel = spawn_master_tls_client(
    LinkErrorMode::Close,
    get_master_channel_config(master_address)?,
    EndpointList::new(endpoint.to_string(), &[]),
    ConnectStrategy::default(),
    LogListener::create("client"),
    config,
);

C

dnp3_tls_client_config_t config = dnp3_tls_client_config_init(
    TLS_DOMAIN,
    CA_CHAIN_CA_CERT,
    CA_CHAIN_ENTITY_CERT,
    CA_CHAIN_ENTITY_KEY,
    "" // no password
);

dnp3_master_channel_t *channel = NULL;
dnp3_endpoint_list_t *endpoints = dnp3_endpoint_list_create(endpoint);
dnp3_param_error_t err = dnp3_master_channel_create_tls(
    runtime,
    DNP3_LINK_ERROR_MODE_CLOSE,
    get_master_channel_config(),
    endpoints,
    dnp3_connect_strategy_init(),
    get_client_state_listener(),
    config,
    &channel
);
dnp3_endpoint_list_destroy(endpoints);
// check error

C++

// defaults to CA mode
dnp3::TlsClientConfig config(
    TLS_DOMAIN,
    CA_CHAIN_CA_CERT,
    CA_CHAIN_ENTITY_CERT,
    CA_CHAIN_ENTITY_KEY,
    "" // no password
);

dnp3::EndpointList endpoints(endpoint);

auto channel = dnp3::MasterChannel::create_tls_channel(
    runtime,
    dnp3::LinkErrorMode::close,
    get_master_channel_config(),
    endpoints,
    dnp3::ConnectStrategy(),
    create_client_state_listener(),
    config
);

Java

TlsClientConfig config =
        new TlsClientConfig(
                "test.com",
                CA_CERT,
                CA_ENTITY_CERT,
                CA_ENTITY_KEY,
                "" // no password
        );

MasterChannel channel =
        MasterChannel.createTlsChannel(
                runtime,
                LinkErrorMode.CLOSE,
                getMasterChannelConfig(),
                new EndpointList(endpoint),
                new ConnectStrategy(),
                state -> System.out.println("client state: " + state),
                config);

C#

// defaults to CA mode
var config = new TlsClientConfig(
    TlsDomain,
    CaCert,
    CaEntityCert,
    CaEntityKey,
    "" // no password
);

var channel = MasterChannel.CreateTlsChannel(
    runtime,
    LinkErrorMode.Close,
    GetMasterChannelConfig(),
    new EndpointList(endpoint),
    new ConnectStrategy(),
    new LogListener("client"),
    config
);

Self-signed certificate configuration

Rust

let config = TlsClientConfig::self_signed(
    peer_cert,
    entity_cert,
    entity_key,
    None, // no password
    MinTlsVersion::V12,
)?;

let channel = spawn_master_tls_client(
    LinkErrorMode::Close,
    get_master_channel_config(master_address)?,
    EndpointList::new(endpoint.to_string(), &[]),
    ConnectStrategy::default(),
    LogListener::create("client"),
    config,
);

C

dnp3_tls_client_config_t config = dnp3_tls_client_config_init(
    TLS_DOMAIN,
    SELF_SIGNED_PEER_CERT,
    SELF_SIGNED_ENTITY_CERT,
    SELF_SIGNED_ENTITY_KEY,
    "" // no password
);
config.certificate_mode = DNP3_CERTIFICATE_MODE_SELF_SIGNED;

dnp3_master_channel_t *channel = NULL;
dnp3_endpoint_list_t *endpoints = dnp3_endpoint_list_create(endpoint);
dnp3_param_error_t err = dnp3_master_channel_create_tls(
    runtime,
    DNP3_LINK_ERROR_MODE_CLOSE,
    get_master_channel_config(),
    endpoints,
    dnp3_connect_strategy_init(),
    get_client_state_listener(),
    config,
    &channel
);
dnp3_endpoint_list_destroy(endpoints);
// check error

C++

dnp3::TlsClientConfig config(
    TLS_DOMAIN,
    SELF_SIGNED_PEER_CERT,
    SELF_SIGNED_ENTITY_CERT,
    SELF_SIGNED_ENTITY_KEY,
    "" // no password
);
config.certificate_mode = dnp3::CertificateMode::self_signed;

dnp3::EndpointList endpoints(endpoint);

auto channel = dnp3::MasterChannel::create_tls_channel(
    runtime,
    dnp3::LinkErrorMode::close,
    get_master_channel_config(),
    endpoints,
    dnp3::ConnectStrategy(),
    create_client_state_listener(),
    config
);

Java

TlsClientConfig config =
        new TlsClientConfig(
                "test.com",
                SELF_SIGNED_PEER_CERT,
                SELF_SIGNED_ENTITY_CERT,
                SELF_SIGNED_ENTITY_KEY,
                "" // no password
        ).withCertificateMode(CertificateMode.SELF_SIGNED);

MasterChannel channel =
        MasterChannel.createTlsChannel(
                runtime,
                LinkErrorMode.CLOSE,
                getMasterChannelConfig(),
                new EndpointList(endpoint),
                new ConnectStrategy(),
                state -> System.out.println("client state: " + state),
                config);

C#

var config = new TlsClientConfig(
    TlsDomain,
    SelfSignedPeerCert,
    SelfSignedEntityCert,
    SelfSignedEntityKey,
    "" // no password
).WithCertificateMode(CertificateMode.SelfSigned);

var channel = MasterChannel.CreateTlsChannel(
    runtime,
    LinkErrorMode.Close,
    GetMasterChannelConfig(),
    new EndpointList(endpoint),
    new ConnectStrategy(),
    new LogListener("client"),
    config
);