SUPPORT required to connect to an Siemens S7 1214C PLC #5
Answered
by
H4rw3y5ag3
H4rw3y5ag3
asked this question in
Q&A
-
|
Hi, I'm trying to connect to an OPC-UA Server on my S7. Fatal error: Uncaught PhpOpcua\Client\Exception\ServiceException: Server returned ServiceFault: 0x80200000A search result for this code is: I've no idea what I'm doing wrong. I've also tried to generate the certificates but no difference. With UaExpert it works. |
Beta Was this translation helpful? Give feedback.
Answered by
H4rw3y5ag3
May 15, 2026
Replies: 4 comments 15 replies
-
|
Hi @H4rw3y5ag3 ,Thanks for the report, I will immediately investigate the problem so that it can be resolved as quickly as possible. To better understand what you're using, could you confirm that you use: Security: Basic256Sha256 Could you confirm that you are using v4.3.0? last thing it would be great if you could run this code which would give me a complete insight into the problem require __DIR__ . '/../vendor/autoload.php';
use PhpOpcua\Client\ClientBuilder;
use PhpOpcua\Client\Exception\ConnectionException;
use PhpOpcua\Client\Exception\OpcUaException;
use PhpOpcua\Client\Security\SecurityMode;
use PhpOpcua\Client\Security\SecurityPolicy;
use Psr\Log\AbstractLogger;
$logger = new class (__DIR__ . '/opcua-debug.log') extends AbstractLogger {
/** @var resource */
private $file;
public function __construct(string $logPath)
{
$handle = fopen($logPath, 'ab');
if ($handle === false) {
throw new RuntimeException(sprintf('Cannot open log file: %s', $logPath));
}
$this->file = $handle;
}
/**
* @param mixed $level
* @param string|Stringable $message
* @param array<string, mixed> $context
*/
public function log($level, string|Stringable $message, array $context = []): void
{
$timestamp = (new DateTimeImmutable())->format('Y-m-d H:i:s.u');
$redacted = $this->redact($context);
$interpolated = $this->sanitizeString($this->interpolate((string)$message, $redacted));
$contextJson = $redacted === [] ? '' : ' ' . json_encode($redacted, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE | JSON_PARTIAL_OUTPUT_ON_ERROR);
$line = sprintf('[%s] opcua.%s: %s%s%s', $timestamp, strtoupper((string)$level), $interpolated, $contextJson, PHP_EOL);
fwrite(STDOUT, $line);
fwrite($this->file, $line);
}
/**
* @param array<string, mixed> $context
* @return array<string, mixed>
*/
private function redact(array $context): array
{
foreach ($context as $key => $value) {
if (is_array($value)) {
$context[$key] = $this->redact($value);
continue;
}
if (in_array($key, ['session_id', 'token', 'authToken'], true) && $value !== null && $value !== '') {
$context[$key] = '***' . substr(md5((string)$value), -5);
continue;
}
if ($key === 'host' && $value !== null && $value !== '') {
$context[$key] = '***';
continue;
}
if (is_string($value)) {
$context[$key] = $this->sanitizeString($value);
}
}
return $context;
}
private function sanitizeString(string $value): string
{
static $projectRoot = null;
if ($projectRoot === null) {
$projectRoot = dirname(__DIR__);
}
if ($projectRoot !== '' && $projectRoot !== '/') {
$value = str_replace($projectRoot, '<project>', $value);
}
$value = (string)preg_replace('~/(home|Users)/[^/\s"\'<>]+~', '/$1/<user>', $value);
$value = (string)preg_replace_callback(
'~\b([a-z][a-z0-9+\-.]*)://([^/:?#\s"\'<>}\]]+)([^\s"\'<>}\]]*)?~i',
static fn(array $m): string => $m[1] . '://***' . ($m[3] ?? ''),
$value,
);
return (string)preg_replace_callback(
'~(?<![:/.\w])(?:(?:[a-z0-9](?:[a-z0-9\-]*[a-z0-9])?\.)+[a-z][a-z0-9\-]*|[a-z][a-z0-9\-]*|\d{1,3}(?:\.\d{1,3}){3}):(\d{1,5})(?!\d)~i',
static fn(array $m): string => '***:' . $m[1],
$value,
);
}
/**
* @param array<string, mixed> $context
*/
private function interpolate(string $message, array $context): string
{
$replacements = [];
foreach ($context as $key => $value) {
if (is_scalar($value) || $value === null || $value instanceof Stringable) {
$replacements['{' . $key . '}'] = (string)($value ?? '');
}
}
return strtr($message, $replacements);
}
};
try {
$builder = ClientBuilder::create(logger: $logger)
->setSecurityPolicy(SecurityPolicy::Basic256Sha256)
->setSecurityMode(SecurityMode::SignAndEncrypt)
// Client certificate: if omitted, the library auto-generates an
// ephemeral self-signed RSA-2048 certificate in memory (changes on
// every Client instance). For production, uncomment and provide your
// own certificate, private key, and optional CA chain:
// ->setClientCertificate(
// __DIR__ . '/certs/client.pem',
// __DIR__ . '/certs/client.key',
// __DIR__ . '/certs/ca.pem',
// )
->setUserCredentials('admin', 'admin123');
// ->setBatchSize(0); // Disable batching, skipping discoverServerOperationLimits feature
// ->autoAccept(true, force:true); // Client forces auto accept server certificate even if not trusted
$client = $builder->connect('opc.tcp://localhost:4841/UA/TestServer');
$status = $client->read('i=2259');
$logger->info('ServerStatus read', [
'value' => $status->getValue(),
'statusCode' => $status->statusCode,
]);
// WARNING: the block below logs the server build info (vendor, software
// version, build number) -- this is a server fingerprint and may help an
// attacker identify CVEs affecting your deployment. Uncomment only if you
// intend to share the output in accordance with SECURITY.md.
//$info = $client->getServerBuildInfo();
//$logger->info('Server build info', [
// 'productName' => $info->productName,
// 'manufacturerName' => $info->manufacturerName,
// 'softwareVersion' => $info->softwareVersion,
// 'buildNumber' => $info->buildNumber,
// 'buildDate' => $info->buildDate?->format(DateTimeInterface::ATOM),
//]);
$client->disconnect();
} catch (Throwable $e) {
$label = match (true) {
$e instanceof ConnectionException => 'OPC UA connection failed',
$e instanceof OpcUaException => 'OPC UA exception',
default => 'Unhandled exception',
};
$logger->error($label, [
'exception' => $e::class,
'message' => $e->getMessage(),
'file' => $e->getFile() . ':' . $e->getLine(),
'trace' => $e->getTraceAsString(),
]);
throw $e;
}
In this code I also added the Let me know how it goes, with this I can intervene in a targeted way without going crazy It should generate a full debug report, so I understand exactly what's going on, This test you see was done against UA-.NETStandard In the meantime, thank you very much for reporting the problem and thanks in advance for your contribution. |
Beta Was this translation helpful? Give feedback.
2 replies
-
|
Hi, Here is the whole console output and stack trace, of the code above. [2026-05-15 11:19:30.414074] opcua.DEBUG: Discovering server certificate from ***:4840 {"endpoint":null,"session_id":null,"host":"***","port":4840}
[2026-05-15 11:19:30.437007] opcua.DEBUG: Discovery HEL for opc.tcp://***:4840 {"endpoint":null,"session_id":null,"url":"opc.tcp://***:4840"}
[2026-05-15 11:19:30.448988] opcua.DEBUG: Discovery ACK received, sending OPN request {"endpoint":null,"session_id":null}
[2026-05-15 11:19:30.454322] opcua.DEBUG: Discovery OPN response received {"endpoint":null,"session_id":null}
[2026-05-15 11:19:30.461081] opcua.DEBUG: Discovery GetEndpoints request for opc.tcp://***:4840 {"endpoint":null,"session_id":null,"url":"opc.tcp://***:4840"}
[2026-05-15 11:19:30.464406] opcua.DEBUG: Discovery GetEndpoints response received {"endpoint":null,"session_id":null}
[2026-05-15 11:19:30.465605] opcua.INFO: Connecting to opc.tcp://***:4840 {"endpoint":"opc.tcp://***:4840","session_id":null}
[2026-05-15 11:19:30.477130] opcua.DEBUG: TCP connection established to ***:4840 {"endpoint":null,"session_id":null,"host":"***","port":4840}
[2026-05-15 11:19:30.477248] opcua.DEBUG: Sending HEL message to opc.tcp://***:4840 {"endpoint":null,"session_id":null,"url":"opc.tcp://***:4840"}
[2026-05-15 11:19:30.479265] opcua.DEBUG: ACK received (receiveBufferSize=8192) {"endpoint":null,"session_id":null,"bufferSize":8192}
[2026-05-15 11:19:30.479344] opcua.DEBUG: HEL/ACK handshake complete {"endpoint":null,"session_id":null}
[2026-05-15 11:19:30.862482] opcua.DEBUG: OpenSecureChannel request (policy=Basic256Sha256, mode=SignAndEncrypt) {"endpoint":null,"session_id":null,"policy":"Basic256Sha256","mode":"SignAndEncrypt"}
[2026-05-15 11:19:35.736979] opcua.DEBUG: OpenSecureChannel response: channelId=1486949969 {"endpoint":null,"session_id":null,"channelId":1486949969}
[2026-05-15 11:19:35.745882] opcua.DEBUG: Secure channel opened (channelId=1486949969) {"endpoint":null,"session_id":null,"channelId":1486949969}
[2026-05-15 11:19:35.746910] opcua.DEBUG: CreateSession request for opc.tcp://***:4840 {"endpoint":null,"session_id":null,"url":"opc.tcp://***:4840"}
[2026-05-15 11:19:37.471030] opcua.DEBUG: CreateSession response: authToken=***3a8dc {"endpoint":null,"session_id":"***3a8dc","token":"***3a8dc"}
[2026-05-15 11:19:37.472813] opcua.DEBUG: ActivateSession request {"endpoint":null,"session_id":"***3a8dc"}
[2026-05-15 11:19:37.498444] opcua.ERROR: OPC UA exception {"exception":"PhpOpcua\\Client\\Exception\\ServiceException","message":"Server returned ServiceFault: 0x80200000 0x80200000","file":"<project>\\php\\vendor\\php-opcua\\opcua-client\\src\\Protocol\\***:47","trace":"#0 <project>\\php\\vendor\\php-opcua\\opcua-client\\src\\Protocol\\SessionService.php(249): PhpOpcua\\Client\\Protocol\\ServiceFault::throwIf(Object(PhpOpcua\\Client\\Types\\NodeId), 2149580800)\n#1 <project>\\php\\vendor\\php-opcua\\opcua-client\\src\\Client\\ManagesSessionTrait.php(98): PhpOpcua\\Client\\Protocol\\SessionService->decodeActivateSessionResponse(Object(PhpOpcua\\Client\\Encoding\\BinaryDecoder))\n#2 <project>\\php\\vendor\\php-opcua\\opcua-client\\src\\Client\\ManagesSessionTrait.php(31): PhpOpcua\\Client\\Client->activateSession('opc.tcp://***')\n#3 <project>\\php\\vendor\\php-opcua\\opcua-client\\src\\Client\\ManagesConnectionTrait.php(210): PhpOpcua\\Client\\Client->createAndActivateSession('opc.tcp://***')\n#4 <project>\\php\\vendor\\php-opcua\\opcua-client\\src\\Client.php(269): PhpOpcua\\Client\\Client->performConnect('opc.tcp://***')\n#5 <project>\\php\\vendor\\php-opcua\\opcua-client\\src\\ClientBuilder.php(296): PhpOpcua\\Client\\Client->__construct('opc.tcp://***', Object(PhpOpcua\\Client\\Security\\SecurityPolicy), Object(PhpOpcua\\Client\\Security\\SecurityMode), NULL, NULL, NULL, '****', '****', NULL, NULL, Object(Psr\\Log\\AbstractLogger@anonymous), Object(PhpOpcua\\Client\\Event\\NullEventDispatcher), NULL, NULL, false, false, Object(PhpOpcua\\Client\\Cache\\InMemoryCache), true, Object(PhpOpcua\\Client\\Cache\\WireCacheCodec), 5.0, NULL, NULL, 10, true, false, Object(PhpOpcua\\Client\\Repository\\ExtensionObjectRepository), Array, Object(PhpOpcua\\Client\\Module\\ModuleRegistry))\n#6 <project>\\php\\denug-test.php(135): PhpOpcua\\Client\\ClientBuilder->connect('opc.tcp://***')\n#7 {main}"}
Fatal error: Uncaught PhpOpcua\Client\Exception\ServiceException: Server returned ServiceFault: 0x80200000 0x80200000 in php\vendor\php-opcua\opcua-client\src\Protocol\ServiceFault.php:47
Stack trace:
#0 php\vendor\php-opcua\opcua-client\src\Protocol\SessionService.php(249): PhpOpcua\Client\Protocol\ServiceFault::throwIf(Object(PhpOpcua\Client\Types\NodeId), 2149580800)
#1 php\vendor\php-opcua\opcua-client\src\Client\ManagesSessionTrait.php(98): PhpOpcua\Client\Protocol\SessionService->decodeActivateSessionResponse(Object(PhpOpcua\Client\Encoding\BinaryDecoder))
#2 php\vendor\php-opcua\opcua-client\src\Client\ManagesSessionTrait.php(31): PhpOpcua\Client\Client->activateSession('opc.tcp://10.11...')
#3 php\vendor\php-opcua\opcua-client\src\Client\ManagesConnectionTrait.php(210): PhpOpcua\Client\Client->createAndActivateSession('opc.tcp://10.11...')
#4 php\vendor\php-opcua\opcua-client\src\Client.php(269): PhpOpcua\Client\Client->performConnect('opc.tcp://10.11...')
#5 php\vendor\php-opcua\opcua-client\src\ClientBuilder.php(296): PhpOpcua\Client\Client->__construct('opc.tcp://10.11...', Object(PhpOpcua\Client\Security\SecurityPolicy), Object(PhpOpcua\Client\Security\SecurityMode), NULL, NULL, NULL, '****', '****', NULL, NULL, Object(Psr\Log\AbstractLogger@anonymous), Object(PhpOpcua\Client\Event\NullEventDispatcher), NULL, NULL, false, false, Object(PhpOpcua\Client\Cache\InMemoryCache), true, Object(PhpOpcua\Client\Cache\WireCacheCodec), 5.0, NULL, NULL, 10, true, false, Object(PhpOpcua\Client\Repository\ExtensionObjectRepository), Array, Object(PhpOpcua\Client\Module\ModuleRegistry))
#6 php\denug-test.php(135): PhpOpcua\Client\ClientBuilder->connect('opc.tcp://10.11...')
#7 {main}
thrown in php\vendor\php-opcua\opcua-client\src\Protocol\ServiceFault.php on line 47
PHP Fatal error: Uncaught PhpOpcua\Client\Exception\ServiceException: Server returned ServiceFault: 0x80200000 0x80200000 in php\vendor\php-opcua\opcua-client\src\Protocol\ServiceFault.php:47
Stack trace:
#0 php\vendor\php-opcua\opcua-client\src\Protocol\SessionService.php(249): PhpOpcua\Client\Protocol\ServiceFault::throwIf(Object(PhpOpcua\Client\Types\NodeId), 2149580800)
#1 php\vendor\php-opcua\opcua-client\src\Client\ManagesSessionTrait.php(98): PhpOpcua\Client\Protocol\SessionService->decodeActivateSessionResponse(Object(PhpOpcua\Client\Encoding\BinaryDecoder))
#2 php\vendor\php-opcua\opcua-client\src\Client\ManagesSessionTrait.php(31): PhpOpcua\Client\Client->activateSession('opc.tcp://10.11...')
#3 php\vendor\php-opcua\opcua-client\src\Client\ManagesConnectionTrait.php(210): PhpOpcua\Client\Client->createAndActivateSession('opc.tcp://10.11...')
#4 php\vendor\php-opcua\opcua-client\src\Client.php(269): PhpOpcua\Client\Client->performConnect('opc.tcp://10.11...')
#5 php\vendor\php-opcua\opcua-client\src\ClientBuilder.php(296): PhpOpcua\Client\Client->__construct('opc.tcp://10.11...', Object(PhpOpcua\Client\Security\SecurityPolicy), Object(PhpOpcua\Client\Security\SecurityMode), NULL, NULL, NULL, '****', '****', NULL, NULL, Object(Psr\Log\AbstractLogger@anonymous), Object(PhpOpcua\Client\Event\NullEventDispatcher), NULL, NULL, false, false, Object(PhpOpcua\Client\Cache\InMemoryCache), true, Object(PhpOpcua\Client\Cache\WireCacheCodec), 5.0, NULL, NULL, 10, true, false, Object(PhpOpcua\Client\Repository\ExtensionObjectRepository), Array, Object(PhpOpcua\Client\Module\ModuleRegistry))
#6 php\denug-test.php(135): PhpOpcua\Client\ClientBuilder->connect('opc.tcp://10.11...')
#7 {main}
thrown in php\vendor\php-opcua\opcua-client\src\Protocol\ServiceFault.php on line 47 |
Beta Was this translation helpful? Give feedback.
-
|
Hi @H4rw3y5ag3 Does this error persist even after the update? |
Beta Was this translation helpful? Give feedback.
-
|
Hi @H4rw3y5ag3 It's very likely that I found the problem Can I kindly ask you to share the results, there is no sensitive data in the log it generates, thank you very much for your time, and have a nice day |
Beta Was this translation helpful? Give feedback.
13 replies
-
|
You did it 🎉 Awesome, and so quick, unbelievable ... Here is the confirmaiton, that it worked :) |
Beta Was this translation helpful? Give feedback.
-
|
I've almost completed the other fix you suggested. Would you like to test that one as well? |
Beta Was this translation helpful? Give feedback.
-
|
Thanks again for your availability @H4rw3y5ag3 I just committed the patch [PATCH] SecureChannel & SessionService, |
Beta Was this translation helpful? Give feedback.
-
|
see the results |
Beta Was this translation helpful? Give feedback.
Answer selected by
GianfriAur
-
|
Thanks @H4rw3y5ag3 Thank you for taking the time to test and help me resolve a latent issue like this. If you need further support or encounter any other issues, please let me know; I'll be happy to help. |
Beta Was this translation helpful? Give feedback.
-
|
Hi @H4rw3y5ag3 little follow up, I found the problem and opened a new issue #6 |
Beta Was this translation helpful? Give feedback.
0 replies
-
|
Hi @H4rw3y5ag3 little follow up, I created pr #7 to solve issue #6 that you had identified, I updated the client to version v4.3.1, where the problem is solved, also use Thank you so much for reporting it. If you encounter any other issues or problems, please let us know; we'll be happy to help or solve. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
see the results