ApplicationUri get replaced when mismatch from the certificate

[Siyuan-Xu-Wapice]

Type of issue

• Bug
• Enhancement
• Compliance
• Question
• Help wanted

Current Behavior

Hello,
The OPCF's stack replace the ApplicationUri with the value from Certificate.SubjectAlternativeName.Url if they don't match when calling CheckApplicationInstanceCertificate(). This behavour is the same with the Server type or the Client type ApplicationConfiguration.

Expected Behavior

Shouldn't it throw an error with StatusCode Bad_CertificateUriInvalid instead?

Steps To Reproduce

1. A x509 Certificate with SubjectAlternativeName.Url = "urn:a_mismatch_uri_string"
2. Configure the ApplicaionConfiguration.ApplicationUri = "urn:foobar:123"
3. Call application.CheckApplicationInstanceCertificates().
4. ApplicaitonUri were replaced and no error.

Environment

- OS:
- Environment:
- Runtime:
- Nuget Version:
- Component:
- Server:
- Client:

Anything else?

No response

[marcschier]

Fix for this as discussed in meeting:

1. Add a boolean to keep current logic, and if set to true, throw.
2. All certs loaded must have the same Application URI, and if not, then throw all the time.