node-opcua-client 2.169.0 → 2.172.0

package/dist/client_base.d.ts

@@ -3,7 +3,7 @@
  */
 import type { LocaleId } from "node-opcua-basic-types";
 import type { OPCUACertificateManager } from "node-opcua-certificate-manager";
-import type { OPCUASecureObject } from "node-opcua-common";
+import type { ICertificateKeyPairProvider, ICertificateStore, OPCUASecureObject } from "node-opcua-common";
 import type { Certificate } from "node-opcua-crypto/web";
 import { ObjectRegistry } from "node-opcua-object-registry";
 import type { ResponseCallback } from "node-opcua-pseudo-session";
@@ -12,6 +12,7 @@ import type { FindServersOnNetworkRequestOptions, FindServersRequestOptions, Ser
 import type { ApplicationDescription, EndpointDescription } from "node-opcua-service-endpoints";
 import type { ChannelSecurityToken, MessageSecurityMode } from "node-opcua-service-secure-channel";
 import type { ErrorCallback } from "node-opcua-status-code";
+import type { IClientTransportFactory } from "node-opcua-transport";
 import type { Request, Response } from "./common";
 export type FindServersRequestLike = FindServersRequestOptions;
 export type FindServersOnNetworkRequestLike = FindServersOnNetworkRequestOptions;
@@ -24,7 +25,7 @@ export interface FindEndpointOptions {
     privateKeyFile: string;
     applicationName: string;
     applicationUri: string;
-    clientCertificateManager: OPCUACertificateManager;
+    clientCertificateManager: OPCUACertificateManager | ICertificateStore;
 }
 export interface FindEndpointResult {
     selectedEndpoint: EndpointDescription;
@@ -119,7 +120,7 @@ export interface OPCUAClientBaseOptions {
      *  - you want multiple instances of OPCUAClient to share the same OPCUACertificateManager
      *
      */
-    clientCertificateManager?: OPCUACertificateManager;
+    clientCertificateManager?: OPCUACertificateManager | ICertificateStore;
     /**
      * The client certificate pem file.
      *
@@ -166,6 +167,21 @@ export interface OPCUAClientBaseOptions {
      * defaultTransactionTimeout
      */
     defaultTransactionTimeout?: number;
+    /**
+     * An optional in-memory certificate/key provider.
+     *
+     * When supplied, the client skips disk-based certificate
+     * path resolution and uses the provider directly.
+     */
+    certificateKeyPairProvider?: ICertificateKeyPairProvider;
+    /**
+     * Optional factory for the underlying client transport. When omitted, the
+     * secure-channel layer uses `defaultClientTransportFactory` (a Node-only
+     * TCP transport). Consumers that need a different transport — browser
+     * WebSocket, in-process stub, tracing wrapper — pass a factory here and
+     * it is threaded through to `ClientSecureChannelLayer`.
+     */
+    transportFactory?: IClientTransportFactory;
 }
 export interface GetEndpointsOptions {
     endpointUrl?: string;
@@ -176,7 +192,7 @@ export interface OPCUAClientBase<Events extends OPCUAClientBaseEvents = OPCUACli
     /**
      * certificate Manager
      */
-    readonly clientCertificateManager: OPCUACertificateManager;
+    readonly clientCertificateManager: ICertificateStore;
     /***
      *
      * @param endpointUrl the endpoint of the server to connect to ( i.e "opc.tcp://machine.name:3434/name" )

package/dist/client_base.js.map

@@ -1 +1 @@
-{"version":3,"file":"client_base.js","sourceRoot":"","sources":["../source/client_base.ts"],"names":[],"mappings":";;;AAQA,2EAA4D;AA0X/C,QAAA,eAAe,GAAG;IAC3B,QAAQ,EAAE,IAAI,2CAAc,EAAE;IAC9B,UAAU,EAAE,IAAI,GAAG,CAAC;IAEpB,MAAM,CAAC,OAA+B;QAClC,mBAAmB;QACnB,OAAO,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvC,CAAC;CACJ,CAAC"}
+{"version":3,"file":"client_base.js","sourceRoot":"","sources":["../source/client_base.ts"],"names":[],"mappings":";;;AAQA,2EAA4D;AA4Y/C,QAAA,eAAe,GAAG;IAC3B,QAAQ,EAAE,IAAI,2CAAc,EAAE;IAC9B,UAAU,EAAE,IAAI,GAAG,CAAC;IAEpB,MAAM,CAAC,OAA+B;QAClC,mBAAmB;QACnB,OAAO,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvC,CAAC;CACJ,CAAC"}

package/dist/client_session.d.ts

@@ -1,7 +1,7 @@
 /**
  * @module node-opcua-client
  */
-import type { EventEmitter } from "events";
+import type { EventEmitter } from "node:events";
 import type { DateTime, UInt8 } from "node-opcua-basic-types";
 import type { ExtraDataTypeManager } from "node-opcua-client-dynamic-extension-object";
 import type { ServerState } from "node-opcua-common";
@@ -11,13 +11,13 @@ import type { LocalizedTextLike } from "node-opcua-data-model";
 import type { DataValue, TimestampsToReturn } from "node-opcua-data-value";
 import type { ExtensionObject } from "node-opcua-extension-object";
 import type { NodeId, NodeIdLike } from "node-opcua-nodeid";
-import { type ArgumentDefinition, type IBasicSession, type IBasicSessionBrowse, type IBasicSessionBrowseNext, type IBasicSessionCall, type IBasicSessionChangeUser, type IBasicSessionRead, type IBasicSessionTranslateBrowsePath, type IBasicSessionWrite, type MethodId, type ResponseCallback } from "node-opcua-pseudo-session";
+import type { ArgumentDefinition, IBasicSession, IBasicSessionBrowse, IBasicSessionBrowseNext, IBasicSessionCall, IBasicSessionChangeUser, IBasicSessionRead, IBasicSessionTranslateBrowsePath, IBasicSessionWrite, MethodId, ResponseCallback } from "node-opcua-pseudo-session";
 import type { EndpointDescription } from "node-opcua-service-endpoints";
 import type { HistoryReadResult } from "node-opcua-service-history";
 import type { QueryFirstRequestOptions, QueryFirstResponse } from "node-opcua-service-query";
 import type { CreateMonitoredItemsRequestOptions, CreateMonitoredItemsResponse, CreateSubscriptionRequestOptions, CreateSubscriptionResponse, DeleteMonitoredItemsRequestOptions, DeleteMonitoredItemsResponse, DeleteSubscriptionsRequestOptions, DeleteSubscriptionsResponse, ModifyMonitoredItemsRequestOptions, ModifyMonitoredItemsResponse, ModifySubscriptionRequestOptions, ModifySubscriptionResponse, PublishRequest, PublishResponse, RepublishRequest, RepublishResponse, SetMonitoringModeRequestOptions, SetMonitoringModeResponse, SetTriggeringRequestOptions, SetTriggeringResponse, TransferSubscriptionsRequestOptions, TransferSubscriptionsResponse } from "node-opcua-service-subscription";
 import type { Callback, ErrorCallback, StatusCode } from "node-opcua-status-code";
-import { type AggregateConfigurationOptions, type HistoryReadRequest, type HistoryReadResponse, type HistoryReadValueIdOptions, type ReadValueIdOptions } from "node-opcua-types";
+import type { AggregateConfigurationOptions, HistoryReadRequest, HistoryReadResponse, HistoryReadValueIdOptions, ReadValueIdOptions } from "node-opcua-types";
 import type { DataType, Variant } from "node-opcua-variant";
 export { ExtraDataTypeManager } from "node-opcua-client-dynamic-extension-object";
 export { ExtensionObject } from "node-opcua-extension-object";

package/dist/client_session.js.map

@@ -1 +1 @@
-{"version":3,"file":"client_session.js","sourceRoot":"","sources":["../source/client_session.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAkEH,yGAAkF;AAAzE,kJAAA,oBAAoB,OAAA;AAE7B,2EAA8D;AAArD,8HAAA,eAAe,OAAA"}
+{"version":3,"file":"client_session.js","sourceRoot":"","sources":["../source/client_session.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AA+DH,yGAAkF;AAAzE,kJAAA,oBAAoB,OAAA;AAE7B,2EAA8D;AAArD,8HAAA,eAAe,OAAA"}

package/dist/client_session_keepalive_manager.d.ts

@@ -7,6 +7,7 @@ import type { ClientSessionImpl } from "./private/client_session_impl";
 export interface ClientSessionKeepAliveManagerEvents {
     on(event: "keepalive", eventHandler: (lastKnownServerState: ServerState, count: number) => void): this;
     on(event: "failure", eventHandler: () => void): this;
+    on(event: "keepalive_failure", eventHandler: () => void): this;
 }
 export declare class ClientSessionKeepAliveManager extends EventEmitter implements ClientSessionKeepAliveManagerEvents {
     private readonly session;
@@ -14,6 +15,7 @@ export declare class ClientSessionKeepAliveManager extends EventEmitter implemen
     private pingTimeout;
     private lastKnownState?;
     private transactionInProgress;
+    private consecutiveFailures;
     count: number;
     checkInterval: number;
     constructor(session: ClientSessionImpl);

package/dist/client_session_keepalive_manager.js

@@ -16,16 +16,19 @@ const node_opcua_constants_1 = require("node-opcua-constants");
 const node_opcua_debug_1 = require("node-opcua-debug");
 const node_opcua_nodeid_1 = require("node-opcua-nodeid");
 const node_opcua_secure_channel_1 = require("node-opcua-secure-channel");
+const node_opcua_status_code_1 = require("node-opcua-status-code");
 const serverStatusStateNodeId = (0, node_opcua_nodeid_1.coerceNodeId)(node_opcua_constants_1.VariableIds.Server_ServerStatus_State);
 const debugLog = (0, node_opcua_debug_1.make_debugLog)(__filename);
 const doDebug = (0, node_opcua_debug_1.checkDebugFlag)(__filename);
 const warningLog = (0, node_opcua_debug_1.make_warningLog)(__filename);
+const maxBackoffInterval = 60_000;
 class ClientSessionKeepAliveManager extends events_1.EventEmitter {
     session;
     timerId;
     pingTimeout;
     lastKnownState;
     transactionInProgress = false;
+    consecutiveFailures = 0;
     count = 0;
     checkInterval;
     constructor(session) {
@@ -69,7 +72,9 @@ class ClientSessionKeepAliveManager extends events_1.EventEmitter {
                 return; // stop here
             }
             if (this.timerId) {
-                const timeout = Math.max(1, this.checkInterval - delta);
+                // When delta exceeds checkInterval it is an explicit backoff requested by _ping_server;
+                // otherwise delta is the time already consumed this cycle.
+                const timeout = delta > this.checkInterval ? delta : Math.max(1, this.checkInterval - delta);
                 this.timerId = setTimeout(() => this.ping_server(), timeout);
             }
         });
@@ -118,17 +123,66 @@ class ClientSessionKeepAliveManager extends events_1.EventEmitter {
                 attributeId: node_opcua_basic_types_1.AttributeIds.Value
             }, (err, dataValue) => {
                 this.transactionInProgress = false;
-                if (err || !dataValue || !dataValue.value) {
-                    if (err) {
-                        warningLog(chalk_1.default.cyan(" warning : ClientSessionKeepAliveManager#ping_server "), chalk_1.default.yellow(err.message));
+                if (err) {
+                    warningLog(chalk_1.default.cyan(" warning : ClientSessionKeepAliveManager#ping_server "), chalk_1.default.yellow(err.message));
+                    const serviceFaultResponse = err.response;
+                    if (serviceFaultResponse) {
+                        const sc = serviceFaultResponse.responseHeader?.serviceResult;
+                        if (sc?.equals(node_opcua_status_code_1.StatusCodes.BadSessionIdInvalid) || sc?.equals(node_opcua_status_code_1.StatusCodes.BadSessionClosed)) {
+                            this.emit("failure");
+                            warningLog("Keep alive has failed, considering a network outage is in place, forcing a reconnection");
+                            terminateConnection(session._client);
+                            resolve(0);
+                        }
+                        else {
+                            if (sc?.equals(node_opcua_status_code_1.StatusCodes.BadInvalidTimestamp)) {
+                                // BadInvalidTimestamp (OPC UA Part 4 7.38.2, Table 178:
+                                // "The timestamp is outside the range allowed by the Server")
+                                // refers to the timestamp field of the RequestHeader
+                                // (OPC UA Part 4 7.32), which the spec states is used
+                                // "only for diagnostic and logging purposes in the Server".
+                                //
+                                // The server responded at the OPC UA application layer:
+                                // the SecureChannel and Session are intact. The cause is
+                                // clock skew between client and server; this is an
+                                // infrastructure concern outside the scope of the keepalive
+                                // manager.
+                                //
+                                // Treating this as a keepalive failure is semantically
+                                // incorrect: the round-trip succeeded. Incrementing
+                                // consecutiveFailures leads to unbounded exponential backoff
+                                // and eventual session expiry server-side, triggering an
+                                // unnecessary reconnect loop.
+                                //
+                                // See: https://reference.opcfoundation.org/Core/Part4/v105/docs/7.38.2
+                                //      https://reference.opcfoundation.org/Core/Part4/v105/docs/7.32
+                                this.consecutiveFailures = 0;
+                                debugLog("emit keepalive (BadInvalidTimestamp: session alive, clock skew on request timestamp)");
+                                this.emit("keepalive", this.lastKnownState ?? node_opcua_common_1.ServerState.Unknown, this.count);
+                                resolve(0);
+                                return;
+                            }
+                            this.consecutiveFailures++;
+                            warningLog("Keep alive received ServiceFault from server (session intact):", sc?.toString());
+                            this.emit("keepalive_failure");
+                            resolve(Math.min(this.checkInterval * 2 ** this.consecutiveFailures, maxBackoffInterval));
+                        }
                     }
+                    else {
+                        this.emit("failure");
+                        warningLog("Keep alive has failed, considering a network outage is in place, forcing a reconnection");
+                        terminateConnection(session._client);
+                        resolve(0);
+                    }
+                    return;
+                }
+                if (!dataValue || !dataValue.value) {
                     /**
                      * @event failure
                      * raised when the server is not responding or is responding with en error to
                      * the keep alive read Variable value transaction
                      */
                     this.emit("failure");
-                    // also simulate a connection by closing the channel abruptly from our end ...
                     warningLog("Keep alive has failed, considering a network outage is in place, forcing a reconnection");
                     terminateConnection(session._client);
                     resolve(0);
@@ -143,6 +197,7 @@ class ClientSessionKeepAliveManager extends events_1.EventEmitter {
                     this.lastKnownState = newState;
                     this.count++; // increase successful counter
                 }
+                this.consecutiveFailures = 0;
                 debugLog("emit keepalive");
                 this.emit("keepalive", this.lastKnownState, this.count);
                 resolve(0);

package/dist/client_session_keepalive_manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"client_session_keepalive_manager.js","sourceRoot":"","sources":["../source/client_session_keepalive_manager.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;AAEH,kDAA0B;AAC1B,mCAAsC;AACtC,yDAA2C;AAC3C,mEAAsD;AACtD,yDAAgD;AAChD,+DAAmD;AAEnD,uDAAkF;AAClF,yDAAiD;AACjD,yEAAqE;AAIrE,MAAM,uBAAuB,GAAG,IAAA,gCAAY,EAAC,kCAAW,CAAC,yBAAyB,CAAC,CAAC;AAEpF,MAAM,QAAQ,GAAG,IAAA,gCAAa,EAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,OAAO,GAAG,IAAA,iCAAc,EAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,IAAA,kCAAe,EAAC,UAAU,CAAC,CAAC;AAO/C,MAAa,6BAA8B,SAAQ,qBAAY;IAC1C,OAAO,CAAoB;IACpC,OAAO,CAAkB;IACzB,WAAW,CAAS;IACpB,cAAc,CAAe;IAC7B,qBAAqB,GAAG,KAAK,CAAC;IAC/B,KAAK,GAAG,CAAC,CAAC;IACV,aAAa,CAAS;IAE7B,YAAY,OAA0B;QAClC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,iBAA0B;QACnC,IAAA,0BAAM,EAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YAC7B,UAAU,CACN,qFAAqF,IAAI,CAAC,OAAO,CAAC,OAAO,iFAAiF,CAC7L,CAAC;QACN,CAAC;QACD,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACX,oEAAoE,IAAI,CAAC,OAAO,CAAC,OAAO,iFAAiF,CAC5K,CAAC;QACN,CAAC;QAED,MAAM,qBAAqB,GACvB,iBAAiB;YACjB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,oDAAwB,CAAC,uBAAuB,CAAC,CAAC;QAE5H,IAAI,CAAC,aAAa,GAAG,qBAAqB,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,qBAAqB,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAExF,0CAA0C;QAC1C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC;IAEM,IAAI;QACP,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,QAAQ,CAAC,oCAAoC,CAAC,CAAC;YAC/C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAC7B,CAAC;aAAM,CAAC;YACJ,QAAQ,CAAC,qEAAqE,CAAC,CAAC;QACpF,CAAC;IACL,CAAC;IAEO,WAAW;QACf,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBAChD,OAAO,CAAC,YAAY;YACxB,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;YACjE,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD;;;;;;OAMG;IACK,KAAK,CAAC,YAAY;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACrC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;YAC9E,OAAO,CAAC,CAAC;QACb,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,oCAAoC;QAClD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,0BAA0B,GAAG,GAAG,GAAG,OAAO,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC;QACpF,IAAI,0BAA0B,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAChD,QAAQ,CACJ,8HAA8H,EAC9H,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAC5B,gCAAgC,EAChC,0BAA0B,CAC7B,CAAC;YACF,6BAA6B;YAC7B,OAAO,0BAA0B,GAAG,IAAI,CAAC,WAAW,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACzB,QAAQ,CAAC,kFAAkF,CAAC,CAAC;YAC7F,OAAO,CAAC,CAAC;QACb,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;YAC1B,QAAQ,CAAC,kFAAkF,CAAC,CAAC;YAC7F,OAAO,CAAC,CAAC;QACb,CAAC;QACD,QAAQ,CACJ,uEAAuE,EACvE,0BAA0B,EAC1B,SAAS,EACT,IAAI,CAAC,OAAO,CAAC,OAAO,CACvB,CAAC;QAEF,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7B,6CAA6C;YAC7C,OAAO,CAAC,CAAC;QACb,CAAC;QACD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,4BAA4B;QAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,OAAO,CAAC,IAAI,CACR;gBACI,MAAM,EAAE,uBAAuB;gBAC/B,WAAW,EAAE,qCAAY,CAAC,KAAK;aAClC,EACD,CAAC,GAAiB,EAAE,SAAqB,EAAE,EAAE;gBACzC,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;gBAEnC,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACxC,IAAI,GAAG,EAAE,CAAC;wBACN,UAAU,CACN,eAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,EACnE,eAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAC5B,CAAC;oBACN,CAAC;oBACD;;;;uBAIG;oBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAErB,8EAA8E;oBAC9E,UAAU,CAAC,yFAAyF,CAAC,CAAC;oBAEtG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAErC,OAAO,CAAC,CAAC,CAAC,CAAC;oBACX,OAAO;gBACX,CAAC;gBAED,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,KAAoB,CAAC;oBACtD,iBAAiB;oBACjB,IAAI,QAAQ,KAAK,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;wBAC1D,UAAU,CACN,2DAA2D,EAC3D,+BAAW,CAAC,QAAQ,CAAC,EACrB,OAAO,EACP,+BAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CACnC,CAAC;oBACN,CAAC;oBACD,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;oBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,8BAA8B;gBAChD,CAAC;gBACD,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxD,OAAO,CAAC,CAAC,CAAC,CAAC;YACf,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AA3KD,sEA2KC;AAED,SAAS,mBAAmB,CAAC,MAA0B;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,OAAO,GAA8B,MAAc,CAAC,cAAc,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO;IACX,CAAC;IACD,OAAO,CAAC,oBAAoB,EAAE,CAAC;AACnC,CAAC"}
+{"version":3,"file":"client_session_keepalive_manager.js","sourceRoot":"","sources":["../source/client_session_keepalive_manager.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;AAEH,kDAA0B;AAC1B,mCAAsC;AACtC,yDAA2C;AAC3C,mEAAsD;AACtD,yDAAgD;AAChD,+DAAmD;AAEnD,uDAAkF;AAClF,yDAAiD;AACjD,yEAAqE;AAErE,mEAAqD;AAYrD,MAAM,uBAAuB,GAAG,IAAA,gCAAY,EAAC,kCAAW,CAAC,yBAAyB,CAAC,CAAC;AAEpF,MAAM,QAAQ,GAAG,IAAA,gCAAa,EAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,OAAO,GAAG,IAAA,iCAAc,EAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,UAAU,GAAG,IAAA,kCAAe,EAAC,UAAU,CAAC,CAAC;AAQ/C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAa,6BAA8B,SAAQ,qBAAY;IAC1C,OAAO,CAAoB;IACpC,OAAO,CAAkB;IACzB,WAAW,CAAS;IACpB,cAAc,CAAe;IAC7B,qBAAqB,GAAG,KAAK,CAAC;IAC9B,mBAAmB,GAAG,CAAC,CAAC;IACzB,KAAK,GAAG,CAAC,CAAC;IACV,aAAa,CAAS;IAE7B,YAAY,OAA0B;QAClC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,iBAA0B;QACnC,IAAA,0BAAM,EAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YAC7B,UAAU,CACN,qFAAqF,IAAI,CAAC,OAAO,CAAC,OAAO,iFAAiF,CAC7L,CAAC;QACN,CAAC;QACD,mBAAmB;QACnB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACX,oEAAoE,IAAI,CAAC,OAAO,CAAC,OAAO,iFAAiF,CAC5K,CAAC;QACN,CAAC;QAED,MAAM,qBAAqB,GACvB,iBAAiB;YACjB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,oDAAwB,CAAC,uBAAuB,CAAC,CAAC;QAE5H,IAAI,CAAC,aAAa,GAAG,qBAAqB,CAAC;QAC3C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,qBAAqB,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAExF,0CAA0C;QAC1C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC;IAEM,IAAI;QACP,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,QAAQ,CAAC,oCAAoC,CAAC,CAAC;YAC/C,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAC7B,CAAC;aAAM,CAAC;YACJ,QAAQ,CAAC,qEAAqE,CAAC,CAAC;QACpF,CAAC;IACL,CAAC;IAEO,WAAW;QACf,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBAChD,OAAO,CAAC,YAAY;YACxB,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,wFAAwF;gBACxF,2DAA2D;gBAC3D,MAAM,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC;gBAC7F,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;YACjE,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD;;;;;;OAMG;IACK,KAAK,CAAC,YAAY;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACrC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;YAC9E,OAAO,CAAC,CAAC;QACb,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC,CAAC,oCAAoC;QAClD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,MAAM,0BAA0B,GAAG,GAAG,GAAG,OAAO,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC;QACpF,IAAI,0BAA0B,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAChD,QAAQ,CACJ,8HAA8H,EAC9H,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAC5B,gCAAgC,EAChC,0BAA0B,CAC7B,CAAC;YACF,6BAA6B;YAC7B,OAAO,0BAA0B,GAAG,IAAI,CAAC,WAAW,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACzB,QAAQ,CAAC,kFAAkF,CAAC,CAAC;YAC7F,OAAO,CAAC,CAAC;QACb,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;YAC1B,QAAQ,CAAC,kFAAkF,CAAC,CAAC;YAC7F,OAAO,CAAC,CAAC;QACb,CAAC;QACD,QAAQ,CACJ,uEAAuE,EACvE,0BAA0B,EAC1B,SAAS,EACT,IAAI,CAAC,OAAO,CAAC,OAAO,CACvB,CAAC;QAEF,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC7B,6CAA6C;YAC7C,OAAO,CAAC,CAAC;QACb,CAAC;QACD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QAClC,4BAA4B;QAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,OAAO,CAAC,IAAI,CACR;gBACI,MAAM,EAAE,uBAAuB;gBAC/B,WAAW,EAAE,qCAAY,CAAC,KAAK;aAClC,EACD,CAAC,GAAiB,EAAE,SAAqB,EAAE,EAAE;gBACzC,IAAI,CAAC,qBAAqB,GAAG,KAAK,CAAC;gBAEnC,IAAI,GAAG,EAAE,CAAC;oBACN,UAAU,CAAC,eAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,EAAE,eAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC3G,MAAM,oBAAoB,GAAI,GAAkC,CAAC,QAAQ,CAAC;oBAC1E,IAAI,oBAAoB,EAAE,CAAC;wBACvB,MAAM,EAAE,GAAG,oBAAoB,CAAC,cAAc,EAAE,aAAa,CAAC;wBAC9D,IAAI,EAAE,EAAE,MAAM,CAAC,oCAAW,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,oCAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;4BAC1F,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;4BACrB,UAAU,CACN,yFAAyF,CAC5F,CAAC;4BACF,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;4BACrC,OAAO,CAAC,CAAC,CAAC,CAAC;wBACf,CAAC;6BAAM,CAAC;4BACJ,IAAI,EAAE,EAAE,MAAM,CAAC,oCAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;gCAC9C,wDAAwD;gCACxD,8DAA8D;gCAC9D,qDAAqD;gCACrD,sDAAsD;gCACtD,4DAA4D;gCAC5D,EAAE;gCACF,wDAAwD;gCACxD,yDAAyD;gCACzD,mDAAmD;gCACnD,4DAA4D;gCAC5D,WAAW;gCACX,EAAE;gCACF,uDAAuD;gCACvD,oDAAoD;gCACpD,6DAA6D;gCAC7D,yDAAyD;gCACzD,8BAA8B;gCAC9B,EAAE;gCACF,uEAAuE;gCACvE,qEAAqE;gCACrE,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;gCAC7B,QAAQ,CAAC,sFAAsF,CAAC,CAAC;gCACjG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,IAAI,+BAAW,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gCAC/E,OAAO,CAAC,CAAC,CAAC,CAAC;gCACX,OAAO;4BACX,CAAC;4BACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BAC3B,UAAU,CAAC,gEAAgE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;4BAC7F,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;4BAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC;wBAC9F,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACJ,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACrB,UAAU,CAAC,yFAAyF,CAAC,CAAC;wBACtG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;wBACrC,OAAO,CAAC,CAAC,CAAC,CAAC;oBACf,CAAC;oBACD,OAAO;gBACX,CAAC;gBACD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBACjC;;;;uBAIG;oBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrB,UAAU,CAAC,yFAAyF,CAAC,CAAC;oBACtG,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBACrC,OAAO,CAAC,CAAC,CAAC,CAAC;oBACX,OAAO;gBACX,CAAC;gBAED,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,KAAoB,CAAC;oBACtD,iBAAiB;oBACjB,IAAI,QAAQ,KAAK,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;wBAC1D,UAAU,CACN,2DAA2D,EAC3D,+BAAW,CAAC,QAAQ,CAAC,EACrB,OAAO,EACP,+BAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CACnC,CAAC;oBACN,CAAC;oBACD,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;oBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,8BAA8B;gBAChD,CAAC;gBACD,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;gBAC7B,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxD,OAAO,CAAC,CAAC,CAAC,CAAC;YACf,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AA1ND,sEA0NC;AAED,SAAS,mBAAmB,CAAC,MAA0B;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,OAAO,GAA8B,MAAc,CAAC,cAAc,CAAC;IACzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO;IACX,CAAC;IACD,OAAO,CAAC,oBAAoB,EAAE,CAAC;AACnC,CAAC"}

package/dist/private/client_base_impl.d.ts

@@ -1,5 +1,4 @@
-import { type OPCUACertificateManager } from "node-opcua-certificate-manager";
-import { OPCUASecureObject } from "node-opcua-common";
+import { type ICertificateStore, OPCUASecureObject } from "node-opcua-common";
 import { type Certificate } from "node-opcua-crypto/web";
 import type { IBasicTransportSettings, ResponseCallback } from "node-opcua-pseudo-session";
 import { ClientSecureChannelLayer, type ConnectionStrategy, type ConnectionStrategyOptions, type SecurityPolicy } from "node-opcua-secure-channel";
@@ -78,7 +77,8 @@ export declare class ClientBaseImpl<Events extends OPCUAClientBaseEvents = OPCUA
     private _instanceNumber;
     private _transportSettings;
     private _transportTimeout?;
-    clientCertificateManager: OPCUACertificateManager;
+    private _transportFactory?;
+    clientCertificateManager: ICertificateStore;
     isUnusable(): boolean;
     protected _setInternalState(internalState: InternalClientState): void;
     emit<K>(eventName: K, ...others: unknown[]): boolean;
@@ -86,7 +86,7 @@ export declare class ClientBaseImpl<Events extends OPCUAClientBaseEvents = OPCUA
     private _cancel_reconnection;
     _recreate_secure_channel(callback: ErrorCallback): void;
     _internal_create_secure_channel(connectionStrategy: ConnectionStrategyOptions, callback: CreateSecureChannelCallbackFunc): void;
-    static createCertificate(clientCertificateManager: OPCUACertificateManager, certificateFile: string, applicationName: string, applicationUri: string): Promise<void>;
+    static createCertificate(clientCertificateManager: ICertificateStore, certificateFile: string, applicationName: string, applicationUri: string): Promise<void>;
     createDefaultCertificate(): Promise<void>;
     protected _getBuiltApplicationUri(): string;
     protected initializeCM(): Promise<void>;

package/dist/private/client_base_impl.js

@@ -287,6 +287,7 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
     _instanceNumber;
     _transportSettings;
     _transportTimeout;
+    _transportFactory;
     clientCertificateManager;
     isUnusable() {
         return (this._internalState === "disconnected" ||
@@ -316,13 +317,25 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
     }
     constructor(options) {
         options = options || {};
-        if (!options.clientCertificateManager) {
-            options.clientCertificateManager = (0, node_opcua_certificate_manager_1.getDefaultCertificateManager)("PKI");
+        if (options.certificateKeyPairProvider) {
+            // In-memory path — use a lightweight in-memory store
+            // when no cert manager was explicitly provided.
+            if (!options.clientCertificateManager) {
+                options.clientCertificateManager = new node_opcua_common_1.InMemoryCertificateStore();
+            }
+            super(options);
+        }
+        else {
+            // Disk path — derive cert/key paths from certificate manager
+            if (!options.clientCertificateManager) {
+                options.clientCertificateManager = (0, node_opcua_certificate_manager_1.getDefaultCertificateManager)("PKI");
+            }
+            const cm = options.clientCertificateManager;
+            options.privateKeyFile = options.privateKeyFile || cm.privateKey;
+            options.certificateFile =
+                options.certificateFile || node_path_1.default.join(cm.rootDir, "own/certs/client_certificate.pem");
+            super(options);
         }
-        options.privateKeyFile = options.privateKeyFile || options.clientCertificateManager.privateKey;
-        options.certificateFile =
-            options.certificateFile || node_path_1.default.join(options.clientCertificateManager.rootDir, "own/certs/client_certificate.pem");
-        super(options);
         this._setInternalState("uninitialized");
         this._instanceNumber = g_ClientCounter++;
         this.applicationName = options.applicationName || "NodeOPCUA-Client";
@@ -364,6 +377,7 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
         this._setInternalState("disconnected");
         this._transportSettings = options.transportSettings || {};
         this._transportTimeout = options.transportTimeout;
+        this._transportFactory = options.transportFactory;
     }
     _cancel_reconnection(callback) {
         // _cancel_reconnection is invoked during disconnection
@@ -510,6 +524,7 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
             tokenRenewalInterval: this.tokenRenewalInterval,
             transportSettings: this._transportSettings,
             transportTimeout: this._transportTimeout,
+            transportFactory: this._transportFactory,
             defaultTransactionTimeout: this.defaultTransactionTimeout
         });
         secureChannel.on("backoff", (count, delay) => {
@@ -583,12 +598,16 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
         if (!node_fs_1.default.existsSync(certificateFile)) {
             const hostname = (0, node_opcua_hostname_1.getHostname)();
             // this.serverInfo.applicationUri!;
-            await clientCertificateManager.createSelfSignedCertificate({
+            // Cast is safe: createDefaultCertificate only calls
+            // this in the disk path, where the manager is always
+            // an OPCUACertificateManager.
+            const cm = clientCertificateManager;
+            await cm.createSelfSignedCertificate({
                 applicationUri,
                 dns: [hostname],
                 // ip: await getIpAddresses(),
                 outputFile: certificateFile,
-                subject: (0, node_opcua_certificate_manager_1.makeSubject)(applicationName, hostname),
+                subject: (0, node_opcua_common_1.makeSubject)(applicationName, hostname),
                 startDate: new Date(),
                 validity: 365 * 10 // 10 years
             });
@@ -613,7 +632,9 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
                 warningLog("Creating default certificate ... please wait");
                 await ClientBaseImpl.createCertificate(this.clientCertificateManager, this.certificateFile, this.applicationName, this._getBuiltApplicationUri());
                 debugLog("privateKey      = ", this.privateKeyFile);
-                debugLog("                = ", this.clientCertificateManager.privateKey);
+                if ("privateKey" in this.clientCertificateManager) {
+                    debugLog("                = ", this.clientCertificateManager.privateKey);
+                }
                 debugLog("certificateFile = ", this.certificateFile);
                 const _certificate = this.getCertificate();
                 const _privateKey = this.getPrivateKey();
@@ -637,10 +658,16 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
             return;
         }
         await this.clientCertificateManager.initialize();
-        await this.createDefaultCertificate();
-        // c8 ignore next
-        if (!node_fs_1.default.existsSync(this.privateKeyFile)) {
-            throw new Error(` cannot locate private key file ${this.privateKeyFile}`);
+        if (this.certificateFile === "<in-memory>" || this.certificateFile === "<unknown>") {
+            // In-memory provider — cert already available, skip disk operations
+        }
+        else {
+            // Disk path — create default cert if missing
+            await this.createDefaultCertificate();
+            // c8 ignore next
+            if (!node_fs_1.default.existsSync(this.privateKeyFile)) {
+                throw new Error(` cannot locate private key file ${this.privateKeyFile}`);
+            }
         }
         if (this.isUnusable())
             return;
@@ -774,7 +801,8 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
         if (!this._secureChannel) {
             // this may happen if the Server has closed the connection abruptly for some unknown reason
             // or if the tcp connection has been broken.
-            callback(new Error("performMessageTransaction: No SecureChannel , connection may have been canceled abruptly by server"));
+            callback(new Error("performMessageTransaction: No SecureChannel , connection may have been canceled abruptly by server" +
+                " while performing " + request.schema.name));
             return;
         }
         if (this._internalState !== "connected" &&
@@ -1165,7 +1193,9 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
             })
                 .catch((err1) => {
                 warningLog("[NODE-OPCUA-W25] client's server certificate verification has failed ", err1.message);
-                warningLog("                 clientCertificateManager.rootDir = ", this.clientCertificateManager.rootDir);
+                if ("rootDir" in this.clientCertificateManager) {
+                    warningLog("                 clientCertificateManager.rootDir = ", this.clientCertificateManager.rootDir);
+                }
                 const chain = (0, web_1.split_der)(endpoint.serverCertificate);
                 warningLog(`                 server certificate chain contains ${chain.length} element(s)`);
                 for (let i = 0; i < chain.length; i++) {
@@ -1199,7 +1229,9 @@ class ClientBaseImpl extends node_opcua_common_1.OPCUASecureObject {
                 }
                 if (chain.length > 1) {
                     warningLog("                 verify also that the issuer certificate is trusted and the issuer's certificate is present in the issuer.cert folder\n" +
-                        "                 of the client certificate manager located in ", this.clientCertificateManager.rootDir);
+                        "                 of the client certificate manager located in ", "rootDir" in this.clientCertificateManager
+                        ? this.clientCertificateManager.rootDir
+                        : "<in-memory>");
                 }
                 else {
                     warningLog("                 verify that the server certificate is trusted or that server certificate issuer's certificate is present in the issuer folder");