Table of Contents
Advertisement
Appendix A.1.1.4. Certificate Validation Options
If connections must be limited to only a particular domain (vendor devices), include Check_Remote_Host
to specify the domain/host name.
Connections
Adapter , Protocol
, TLS_Port
N1
, Modbus/TCP , 1502
The configuration above tells the FieldServer to only accept connections that have the correct certification
and is coming from the specified host.
The Check_Remote_Host value is synonymously known as common name, host name or domain etc.
The common name can be obtained by the following methods:
•
Ask the certificate issuer for the host name.
•
Use online tools to decode the certificate (for example:
decoder.html).
•
If the program openssl is installed on the local PC, then run the following command to get the
common name: openssl x509 -in certificate.pem -text -noout
Appendix A.1.1.5. Set up Server Certificate
Make sure the certificate is in PEM format. Otherwise, convert it to PEM format (reference the link below).
support.ssl.com/Knowledgebase/Article
Configure the FieldServer to use a custom certificate as shown below:
Connections
Adapter , Protocol
, TLS_Port
N1
, Modbus/TCP , 1502
, Validate_Client_Cert , Cert_Authority_File
, Yes
, my_authorized_clients.pem , SMC
, Server_Cert_File
, my_server_cert.pem
Page 22 of 34
QuickServer Start-Up Guide
, Check_Remote_Host
https://www.sslshopper.com/certificate-
Advertisement
Table of Contents
