OPCUApen

A testing tool for attacks against cryptography usage in implementations of OPC UA (GNU GPLv3-licensed)

Prerequisites

Install the GNU Multiple Precision Arithmetic Library using Aptitude or Homebrew

Linux

sudo apt-get install libgmp-dev libmpfr-dev libmpc-dev

Mac OS

Homebrew requires Ruby, check if it is installed

ruby -v

or install according to Ruby Version manager (RVM). Then install Homebrew.

brew install libmpc
brew install mpfr

Setup

OPCUApen is installed using Python 3 and pip

pip3 install --user virtualenv   # install virtualenv
./install.sh                     # install opcuapen in virtual environment
source .venv/bin/activate        # activate the virtual environment
opcuapen --help                  # see if opcuapen is executable

Docker

Dockerized OPC UA implementations can be used for testing

• OPC Foundation UA Java
• OPC Foundation UA Java (Bouncy Castle 1.60)
  • Due to Maven Dependency mediation (see Introduction to the Dependency Mechanism), the OPC UA server example uses Bouncy Castle 1.54, even though the UA Java stack has already updated to Bouncy Castle 1.60. A patch makes this container use Bouncy Castle 1.60 with the server example.
• OPC Foundation UA .Net Standard
• Eclipse Milo
• python-opcua

Usage

cd docker-ua-java
docker-compose up -d
opcuapen test
docker-compose down

cd ../docker-ua-java-bc160
docker-compose up -d
opcuapen test
docker-compose down

Documentation

API documentation can be build using sphinx

sphinx-apidoc --ext-mathjax -eo docs opcuapen
cd docs
make html

Thanks

• python-opcua
• robot-detect

Contact

• André Birke