node-opcua-client 2.63.1 → 2.64.1

package/dist/verify.js

@@ -1,135 +1,135 @@
-"use strict";
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.performCertificateSanityCheck = exports.verifyIsOPCUAValidCertificate = void 0;
-const node_opcua_crypto_1 = require("node-opcua-crypto");
-const node_opcua_debug_1 = require("node-opcua-debug");
-const doDebug = (0, node_opcua_debug_1.checkDebugFlag)(__filename);
-const debugLog = (0, node_opcua_debug_1.make_debugLog)(__filename);
-const errorLog = (0, node_opcua_debug_1.make_errorLog)(__filename);
-const warningLog = (0, node_opcua_debug_1.make_warningLog)(__filename);
-function verifyIsOPCUAValidCertificate(certificate, certificateFile, type, applicationUri) {
-    var _a, _b, _c, _d, _e;
-    const certificateInfo = (0, node_opcua_crypto_1.exploreCertificate)(certificate);
-    const now = new Date();
-    if (certificateInfo.tbsCertificate.validity.notBefore.getTime() > now.getTime()) {
-        // check that certificate is active
-        // certificate is not active yet
-        warningLog(`[NODE-OPCUA-W02] The certificate is not active yet\n` +
-            `notBefore       ${certificateInfo.tbsCertificate.validity.notBefore.toISOString()}\n` +
-            `certificateFile ${certificateFile}`);
-    }
-    //  check that certificate has not expired
-    if (certificateInfo.tbsCertificate.validity.notAfter.getTime() <= now.getTime()) {
-        // certificate is obsolete
-        warningLog(`[NODE-OPCUA-W03] The certificate has expired\n` +
-            `Please regenerate a valid certificate\n` +
-            `notAfter       = ${certificateInfo.tbsCertificate.validity.notAfter.toISOString()}\n` +
-            `certificateFile= ${certificateFile}`);
-    }
-    else {
-        const tenDays = 10 * 24 * 60 * 60 * 1000;
-        if (certificateInfo.tbsCertificate.validity.notAfter.getTime() <= now.getTime() + tenDays) {
-            // certificate is going to expired very soon
-            warningLog(`[NODE-OPCUA-W05] The certificate is about to expire in less than 10 days.\n` +
-                `Please regenerate a valid certificate as soon as possible\n` +
-                `notAfter       = ${certificateInfo.tbsCertificate.validity.notAfter.toISOString()}\n` +
-                `certificateFile= ${certificateFile}\n`);
-        }
-    }
-    // check that server certificate matches Application URI
-    const uniformResourceIdentifier = (_c = (_b = (_a = certificateInfo === null || certificateInfo === void 0 ? void 0 : certificateInfo.tbsCertificate) === null || _a === void 0 ? void 0 : _a.extensions) === null || _b === void 0 ? void 0 : _b.subjectAltName) === null || _c === void 0 ? void 0 : _c.uniformResourceIdentifier;
-    if (!uniformResourceIdentifier) {
-        warningLog(`[NODE-OPCUA-W14] The certificate subjectAltName uniformResourceIdentifier is missing.\n` +
-            `Please regenerate a specific certificate with a uniformResourceIdentifier that matches your ${type} applicationUri\n` +
-            `applicationUri  = ${applicationUri}\n` +
-            `certificateFile = ${certificateFile}\n`);
-        return;
-    }
-    else if (uniformResourceIdentifier[0] !== applicationUri) {
-        warningLog(`[NODE-OPCUA-W06] The certificate subjectAltName does not match the ${type} applicationUri\n` +
-            `Please regenerate a specific certificate that matches your ${type} applicationUri\n` +
-            `certificate subjectAltName  = ${uniformResourceIdentifier[0]}\n` +
-            `${type} applicationUri  = ${applicationUri}\n` +
-            `certificateFile         = ${certificateFile}\n`);
-    }
-    const keyUsage = (_d = certificateInfo.tbsCertificate.extensions) === null || _d === void 0 ? void 0 : _d.keyUsage;
-    if (!keyUsage) {
-        warningLog(`[NODE-OPCUA-W15] The certificate keyUsage is missing\n` + `certificateFile = ${certificateFile}`);
-    }
-    else {
-        // spec says that certificate shall include digitalSignature, nonRepudiation, keyEncipherment and dataEncipherment.
-        // Other key uses are allowed.
-        if (!keyUsage.digitalSignature || !keyUsage.nonRepudiation || !keyUsage.keyEncipherment || !keyUsage.dataEncipherment) {
-            warningLog(`[NODE-OPCUA-W16] The certificate keyUsage must include digitalSignature, nonRepudiation, keyEncipherment and dataEncipherment.\n` +
-                `see https://reference.opcfoundation.org/v104/Core/docs/Part6/6.2.2/\n` +
-                `certificateFile = ${certificateFile}`);
-        }
-    }
-    const extKeyUsage = (_e = certificateInfo.tbsCertificate.extensions) === null || _e === void 0 ? void 0 : _e.extKeyUsage;
-    if (!extKeyUsage) {
-        warningLog(`[NODE-OPCUA-W17] The certificate extKeyUsage is missing\n` + `certificateFile = ${certificateFile}`);
-    }
-    else {
-        // spec says that certificate shall include digitalSignature, nonRepudiation, keyEncipherment and dataEncipherment.
-        // Other key uses are allowed.
-        if (!extKeyUsage.clientAuth && !extKeyUsage.serverAuth) {
-            warningLog(`[NODE-OPCUA-W18] The certificate extKeyUsage must include clientAuth and/or serverAuth.\n` +
-                `see https://reference.opcfoundation.org/v104/Core/docs/Part6/6.2.2/\n` +
-                `certificateFile = ${certificateFile}`);
-        }
-    }
-    const keyLengthInBits = certificateInfo.tbsCertificate.subjectPublicKeyInfo.keyLength * 8;
-    if (keyLengthInBits < 1024) {
-        errorLog(`[NODE-OPCUA-W19] The public key length shall be greater than or equal to 1024 bits. key length is ${keyLengthInBits}.\n` +
-            `see https://reference.opcfoundation.org/v104/GDS/docs/7.6.3/\n` +
-            `certificateFile = ${certificateFile}`);
-    }
-    else if (keyLengthInBits < 2048) {
-        warningLog(`[NODE-OPCUA-W23] key lengths less than 2048 are considered insecure. key length is ${keyLengthInBits}\n` +
-            `see https://reference.opcfoundation.org/v104/Core/docs/Part2/6.8/\n` +
-            `certificateFile = ${certificateFile}`);
-    }
-}
-exports.verifyIsOPCUAValidCertificate = verifyIsOPCUAValidCertificate;
-function performCertificateSanityCheck(serverOrClient, certificateManager, applicationUri) {
-    return __awaiter(this, void 0, void 0, function* () {
-        // verify that certificate is matching private key, and inform the developper if not
-        const certificate = this.getCertificate();
-        const privateKey = (0, node_opcua_crypto_1.convertPEMtoDER)(this.getPrivateKey());
-        //
-        if (!(0, node_opcua_crypto_1.publicKeyAndPrivateKeyMatches)(certificate, privateKey)) {
-            errorLog("[NODE-OPCUA-E01] Configuration error : the certificate and the private key do not match !");
-            errorLog("                  please check the configuration of the OPCUA Server");
-            errorLog("                    privateKey= ", this.privateKeyFile);
-            errorLog(" certificateManager.privateKey= ", certificateManager.privateKey);
-            errorLog("               certificateFile= ", this.certificateFile);
-            throw new Error("[NODE-OPCUA-E01] Configuration error : the certificate and the private key do not match ! please fix your configuration");
-        }
-        // verify that the certificate provided has the right key length ( at least 2048)
-        const privateKeyInfo = (0, node_opcua_crypto_1.explorePrivateKey)(privateKey);
-        const keyLengthInBits = privateKeyInfo.modulus.length * 8;
-        if (keyLengthInBits <= 1024) {
-            warningLog(`[NODE-OPCUA-W04] The public/private key pair uses a key length which is equal or lower than 1024 bits. ( key length was ${keyLengthInBits} )\n` +
-                `OPCUA version 1.04 requires that security key length are greater or equal to 2048 bits.\n` +
-                `The ${serverOrClient} is operating at risk.                                             `);
-        }
-        // verify that the certificate has a valid date and has expected extensions fields such as DNS and IP.
-        const status1 = yield certificateManager.trustCertificate(certificate);
-        const status = yield certificateManager.verifyCertificateAsync(certificate);
-        if (status !== "Good") {
-            warningLog("[NODE-OPCUA-W04] Warning: the certificate status is = ", status, " file = ", this.certificateFile);
-        }
-        verifyIsOPCUAValidCertificate(certificate, this.certificateFile, serverOrClient, applicationUri);
-    });
-}
-exports.performCertificateSanityCheck = performCertificateSanityCheck;
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.performCertificateSanityCheck = exports.verifyIsOPCUAValidCertificate = void 0;
+const node_opcua_crypto_1 = require("node-opcua-crypto");
+const node_opcua_debug_1 = require("node-opcua-debug");
+const doDebug = (0, node_opcua_debug_1.checkDebugFlag)(__filename);
+const debugLog = (0, node_opcua_debug_1.make_debugLog)(__filename);
+const errorLog = (0, node_opcua_debug_1.make_errorLog)(__filename);
+const warningLog = (0, node_opcua_debug_1.make_warningLog)(__filename);
+function verifyIsOPCUAValidCertificate(certificate, certificateFile, type, applicationUri) {
+    var _a, _b, _c, _d, _e;
+    const certificateInfo = (0, node_opcua_crypto_1.exploreCertificate)(certificate);
+    const now = new Date();
+    if (certificateInfo.tbsCertificate.validity.notBefore.getTime() > now.getTime()) {
+        // check that certificate is active
+        // certificate is not active yet
+        warningLog(`[NODE-OPCUA-W02] The certificate is not active yet\n` +
+            `notBefore       ${certificateInfo.tbsCertificate.validity.notBefore.toISOString()}\n` +
+            `certificateFile ${certificateFile}`);
+    }
+    //  check that certificate has not expired
+    if (certificateInfo.tbsCertificate.validity.notAfter.getTime() <= now.getTime()) {
+        // certificate is obsolete
+        warningLog(`[NODE-OPCUA-W03] The certificate has expired\n` +
+            `Please regenerate a valid certificate\n` +
+            `notAfter       = ${certificateInfo.tbsCertificate.validity.notAfter.toISOString()}\n` +
+            `certificateFile= ${certificateFile}`);
+    }
+    else {
+        const tenDays = 10 * 24 * 60 * 60 * 1000;
+        if (certificateInfo.tbsCertificate.validity.notAfter.getTime() <= now.getTime() + tenDays) {
+            // certificate is going to expired very soon
+            warningLog(`[NODE-OPCUA-W05] The certificate is about to expire in less than 10 days.\n` +
+                `Please regenerate a valid certificate as soon as possible\n` +
+                `notAfter       = ${certificateInfo.tbsCertificate.validity.notAfter.toISOString()}\n` +
+                `certificateFile= ${certificateFile}\n`);
+        }
+    }
+    // check that server certificate matches Application URI
+    const uniformResourceIdentifier = (_c = (_b = (_a = certificateInfo === null || certificateInfo === void 0 ? void 0 : certificateInfo.tbsCertificate) === null || _a === void 0 ? void 0 : _a.extensions) === null || _b === void 0 ? void 0 : _b.subjectAltName) === null || _c === void 0 ? void 0 : _c.uniformResourceIdentifier;
+    if (!uniformResourceIdentifier) {
+        warningLog(`[NODE-OPCUA-W14] The certificate subjectAltName uniformResourceIdentifier is missing.\n` +
+            `Please regenerate a specific certificate with a uniformResourceIdentifier that matches your ${type} applicationUri\n` +
+            `applicationUri  = ${applicationUri}\n` +
+            `certificateFile = ${certificateFile}\n`);
+        return;
+    }
+    else if (uniformResourceIdentifier[0] !== applicationUri) {
+        warningLog(`[NODE-OPCUA-W06] The certificate subjectAltName does not match the ${type} applicationUri\n` +
+            `Please regenerate a specific certificate that matches your ${type} applicationUri\n` +
+            `certificate subjectAltName  = ${uniformResourceIdentifier[0]}\n` +
+            `${type} applicationUri  = ${applicationUri}\n` +
+            `certificateFile         = ${certificateFile}\n`);
+    }
+    const keyUsage = (_d = certificateInfo.tbsCertificate.extensions) === null || _d === void 0 ? void 0 : _d.keyUsage;
+    if (!keyUsage) {
+        warningLog(`[NODE-OPCUA-W15] The certificate keyUsage is missing\n` + `certificateFile = ${certificateFile}`);
+    }
+    else {
+        // spec says that certificate shall include digitalSignature, nonRepudiation, keyEncipherment and dataEncipherment.
+        // Other key uses are allowed.
+        if (!keyUsage.digitalSignature || !keyUsage.nonRepudiation || !keyUsage.keyEncipherment || !keyUsage.dataEncipherment) {
+            warningLog(`[NODE-OPCUA-W16] The certificate keyUsage must include digitalSignature, nonRepudiation, keyEncipherment and dataEncipherment.\n` +
+                `see https://reference.opcfoundation.org/v104/Core/docs/Part6/6.2.2/\n` +
+                `certificateFile = ${certificateFile}`);
+        }
+    }
+    const extKeyUsage = (_e = certificateInfo.tbsCertificate.extensions) === null || _e === void 0 ? void 0 : _e.extKeyUsage;
+    if (!extKeyUsage) {
+        warningLog(`[NODE-OPCUA-W17] The certificate extKeyUsage is missing\n` + `certificateFile = ${certificateFile}`);
+    }
+    else {
+        // spec says that certificate shall include digitalSignature, nonRepudiation, keyEncipherment and dataEncipherment.
+        // Other key uses are allowed.
+        if (!extKeyUsage.clientAuth && !extKeyUsage.serverAuth) {
+            warningLog(`[NODE-OPCUA-W18] The certificate extKeyUsage must include clientAuth and/or serverAuth.\n` +
+                `see https://reference.opcfoundation.org/v104/Core/docs/Part6/6.2.2/\n` +
+                `certificateFile = ${certificateFile}`);
+        }
+    }
+    const keyLengthInBits = certificateInfo.tbsCertificate.subjectPublicKeyInfo.keyLength * 8;
+    if (keyLengthInBits < 1024) {
+        errorLog(`[NODE-OPCUA-W19] The public key length shall be greater than or equal to 1024 bits. key length is ${keyLengthInBits}.\n` +
+            `see https://reference.opcfoundation.org/v104/GDS/docs/7.6.3/\n` +
+            `certificateFile = ${certificateFile}`);
+    }
+    else if (keyLengthInBits < 2048) {
+        warningLog(`[NODE-OPCUA-W23] key lengths less than 2048 are considered insecure. key length is ${keyLengthInBits}\n` +
+            `see https://reference.opcfoundation.org/v104/Core/docs/Part2/6.8/\n` +
+            `certificateFile = ${certificateFile}`);
+    }
+}
+exports.verifyIsOPCUAValidCertificate = verifyIsOPCUAValidCertificate;
+function performCertificateSanityCheck(serverOrClient, certificateManager, applicationUri) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // verify that certificate is matching private key, and inform the developper if not
+        const certificate = this.getCertificate();
+        const privateKey = (0, node_opcua_crypto_1.convertPEMtoDER)(this.getPrivateKey());
+        //
+        if (!(0, node_opcua_crypto_1.publicKeyAndPrivateKeyMatches)(certificate, privateKey)) {
+            errorLog("[NODE-OPCUA-E01] Configuration error : the certificate and the private key do not match !");
+            errorLog("                  please check the configuration of the OPCUA Server");
+            errorLog("                    privateKey= ", this.privateKeyFile);
+            errorLog(" certificateManager.privateKey= ", certificateManager.privateKey);
+            errorLog("               certificateFile= ", this.certificateFile);
+            throw new Error("[NODE-OPCUA-E01] Configuration error : the certificate and the private key do not match ! please fix your configuration");
+        }
+        // verify that the certificate provided has the right key length ( at least 2048)
+        const privateKeyInfo = (0, node_opcua_crypto_1.explorePrivateKey)(privateKey);
+        const keyLengthInBits = privateKeyInfo.modulus.length * 8;
+        if (keyLengthInBits <= 1024) {
+            warningLog(`[NODE-OPCUA-W04] The public/private key pair uses a key length which is equal or lower than 1024 bits. ( key length was ${keyLengthInBits} )\n` +
+                `OPCUA version 1.04 requires that security key length are greater or equal to 2048 bits.\n` +
+                `The ${serverOrClient} is operating at risk.                                             `);
+        }
+        // verify that the certificate has a valid date and has expected extensions fields such as DNS and IP.
+        const status1 = yield certificateManager.trustCertificate(certificate);
+        const status = yield certificateManager.verifyCertificateAsync(certificate);
+        if (status !== "Good") {
+            warningLog("[NODE-OPCUA-W04] Warning: the certificate status is = ", status, " file = ", this.certificateFile);
+        }
+        verifyIsOPCUAValidCertificate(certificate, this.certificateFile, serverOrClient, applicationUri);
+    });
+}
+exports.performCertificateSanityCheck = performCertificateSanityCheck;
 //# sourceMappingURL=verify.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "node-opcua-client",
-    "version": "2.63.1",
+    "version": "2.64.1",
     "description": "pure nodejs OPCUA SDK - module -client",
     "scripts": {
         "clean": "node -e \"require('rimraf').sync('certificates');\"  && node -e \"require('rimraf').sync('dist');\"",
@@ -21,57 +21,57 @@
         "callbackify": "^1.1.0",
         "chalk": "4.1.2",
         "delayed": "^2.0.0",
-        "node-opcua-assert": "2.63.0",
-        "node-opcua-basic-types": "2.63.1",
-        "node-opcua-buffer-utils": "2.63.1",
-        "node-opcua-certificate-manager": "2.63.1",
-        "node-opcua-client-dynamic-extension-object": "2.63.1",
-        "node-opcua-common": "2.63.1",
-        "node-opcua-constants": "2.62.7",
-        "node-opcua-crypto": "^1.7.5",
-        "node-opcua-data-model": "2.63.1",
-        "node-opcua-data-value": "2.63.1",
-        "node-opcua-date-time": "2.63.1",
-        "node-opcua-debug": "2.63.1",
-        "node-opcua-extension-object": "2.63.1",
-        "node-opcua-hostname": "2.63.0",
-        "node-opcua-nodeid": "2.63.1",
-        "node-opcua-object-registry": "2.63.1",
-        "node-opcua-pki": "^2.13.0",
-        "node-opcua-pseudo-session": "2.63.1",
-        "node-opcua-schemas": "2.63.1",
-        "node-opcua-secure-channel": "2.63.1",
-        "node-opcua-service-browse": "2.63.1",
-        "node-opcua-service-call": "2.63.1",
-        "node-opcua-service-discovery": "2.63.1",
-        "node-opcua-service-endpoints": "2.63.1",
-        "node-opcua-service-filter": "2.63.1",
-        "node-opcua-service-history": "2.63.1",
-        "node-opcua-service-query": "2.63.1",
-        "node-opcua-service-read": "2.63.1",
-        "node-opcua-service-register-node": "2.63.1",
-        "node-opcua-service-secure-channel": "2.63.1",
-        "node-opcua-service-session": "2.63.1",
-        "node-opcua-service-subscription": "2.63.1",
-        "node-opcua-service-translate-browse-path": "2.63.1",
-        "node-opcua-service-write": "2.63.1",
-        "node-opcua-status-code": "2.63.1",
-        "node-opcua-types": "2.63.1",
-        "node-opcua-utils": "2.63.1",
-        "node-opcua-variant": "2.63.1",
+        "node-opcua-assert": "2.64.1",
+        "node-opcua-basic-types": "2.64.1",
+        "node-opcua-buffer-utils": "2.64.1",
+        "node-opcua-certificate-manager": "2.64.1",
+        "node-opcua-client-dynamic-extension-object": "2.64.1",
+        "node-opcua-common": "2.64.1",
+        "node-opcua-constants": "2.64.1",
+        "node-opcua-crypto": "^1.9.0",
+        "node-opcua-data-model": "2.64.1",
+        "node-opcua-data-value": "2.64.1",
+        "node-opcua-date-time": "2.64.1",
+        "node-opcua-debug": "2.64.1",
+        "node-opcua-extension-object": "2.64.1",
+        "node-opcua-hostname": "2.64.1",
+        "node-opcua-nodeid": "2.64.1",
+        "node-opcua-object-registry": "2.64.1",
+        "node-opcua-pki": "^2.14.0",
+        "node-opcua-pseudo-session": "2.64.1",
+        "node-opcua-schemas": "2.64.1",
+        "node-opcua-secure-channel": "2.64.1",
+        "node-opcua-service-browse": "2.64.1",
+        "node-opcua-service-call": "2.64.1",
+        "node-opcua-service-discovery": "2.64.1",
+        "node-opcua-service-endpoints": "2.64.1",
+        "node-opcua-service-filter": "2.64.1",
+        "node-opcua-service-history": "2.64.1",
+        "node-opcua-service-query": "2.64.1",
+        "node-opcua-service-read": "2.64.1",
+        "node-opcua-service-register-node": "2.64.1",
+        "node-opcua-service-secure-channel": "2.64.1",
+        "node-opcua-service-session": "2.64.1",
+        "node-opcua-service-subscription": "2.64.1",
+        "node-opcua-service-translate-browse-path": "2.64.1",
+        "node-opcua-service-write": "2.64.1",
+        "node-opcua-status-code": "2.64.1",
+        "node-opcua-types": "2.64.1",
+        "node-opcua-utils": "2.64.1",
+        "node-opcua-variant": "2.64.1",
         "once": "^1.4.0",
         "thenify": "^3.3.1",
         "underscore": "^1.13.2"
     },
     "devDependencies": {
         "dequeue": "^1.0.5",
-        "node-opcua-address-space": "2.63.1",
-        "node-opcua-binary-stream": "2.63.1",
-        "node-opcua-factory": "2.63.1",
-        "node-opcua-leak-detector": "2.63.1",
-        "node-opcua-nodesets": "2.63.0",
+        "node-opcua-address-space": "2.64.1",
+        "node-opcua-binary-stream": "2.64.1",
+        "node-opcua-factory": "2.64.1",
+        "node-opcua-leak-detector": "2.64.1",
+        "node-opcua-nodesets": "2.64.1",
         "should": "^13.2.3",
-        "sinon": "^12.0.1"
+        "sinon": "^13.0.1"
     },
     "eslintConfig": {
         "env": {
@@ -93,5 +93,5 @@
         "internet of things"
     ],
     "homepage": "http://node-opcua.github.io/",
-    "gitHead": "d37385314fce703c1cc197104c592df03b2663fb"
+    "gitHead": "b65b8738603cd475d7d99a2b20b0ae9d32b4110c"
 }

package/source/client_session_keepalive_manager.ts

@@ -95,7 +95,7 @@ export class ClientSessionKeepAliveManager extends EventEmitter implements Clien
      */
     private async _ping_server(): Promise<number> {
         const session = this.session;
-        if (!session) {
+        if (!session || session.isReconnecting) {
             debugLog("ClientSessionKeepAliveManager#ping_server => no session available");
             return 0;
         }

package/source/private/client_base_impl.ts

@@ -1292,9 +1292,6 @@ export class ClientBaseImpl extends OPCUASecureObject implements OPCUAClientBase
         session._client = this;
         this._sessions.push(session);
 
-        if (this.keepSessionAlive) {
-            session.startKeepAliveManager();
-        }
     }
 
     private fetchServerCertificate(endpointUrl: string, callback: (err: Error | null, adjustedEndpointUrl?: string) => void): void {

package/source/private/opcua_client_impl.ts

@@ -411,7 +411,7 @@ export class OPCUAClientImpl extends ClientBaseImpl implements OPCUAClient {
 
                 this._addSession(session as ClientSessionImpl);
 
-                this._activateSession(session as ClientSessionImpl, (err1: Error | null, session2?: ClientSessionImpl) => {
+                this._activateSession(session as ClientSessionImpl, (err1: Error | null, session2?: ClientSessionImpl) => {                  
                     callback(err1, session2);
                 });
             }
@@ -1037,6 +1037,9 @@ export class OPCUAClientImpl extends ClientBaseImpl implements OPCUAClient {
                     session._client = this;
                     session.serverNonce = response.serverNonce;
                     session.lastResponseReceivedTime = new Date();
+                    if (this.keepSessionAlive) {
+                        session.startKeepAliveManager();
+                    }            
                     return callback(null, session);
                 } else {
                     // restore client