v4.1.0

[4.1.0] - 2026-04-13

Added

• ECC security policy support. All 10 CLI commands now work transparently with the 4 new Elliptic Curve Cryptography policies introduced in opcua-client v4.1.0:
  • --security-policy=ECC_nistP256 (NIST P-256, AES-128-CBC, SHA-256)
  • --security-policy=ECC_nistP384 (NIST P-384, AES-256-CBC, SHA-384)
  • --security-policy=ECC_brainpoolP256r1 (Brainpool P-256, AES-128-CBC, SHA-256)
  • --security-policy=ECC_brainpoolP384r1 (Brainpool P-384, AES-256-CBC, SHA-384)
  • No --cert/--key required — ECC certificates are auto-generated when omitted.
  • Username/password authentication uses the EccEncryptedSecret protocol automatically.
  • ECC disclaimer: No commercial OPC UA vendor supports ECC endpoints yet. This implementation is tested exclusively against the OPC Foundation's UA-.NETStandard reference stack.
• 12 new ECC integration tests against the uanetstandard-test-suite ECC servers:
  • 6 NIST ECC tests (port 4848): browse and read with P-256 Sign, P-256 SignAndEncrypt (anonymous + admin), P-384 SignAndEncrypt (anonymous + admin), P-384 Sign.
  • 6 Brainpool ECC tests (port 4849): browse and read with brainpoolP256r1 Sign, brainpoolP256r1 SignAndEncrypt (anonymous + admin), brainpoolP384r1 SignAndEncrypt (anonymous + admin), brainpoolP384r1 Sign.
• 4 new unit tests for ECC security policy resolution in CommandRunner (short names and full URIs for all 4 ECC policies).

Changed

• Bumped minimum php-opcua/opcua-client dependency from ^4.0 to ^4.1.
• Security support expanded from 6 to 10 policies (6 RSA + 4 ECC).
• Updated documentation (README, doc/, llms.txt, llms-full.txt, llms-skills.md) to reflect ECC support, add ECC examples, and include the ECC disclaimer.
• Updated CI test server suite from php-opcua/uanetstandard-test-suite@v1.0.0 to @v1.1.0.