Stanislav Ushkovsky

> Do you mean to say that it doesn't get decrypted on server side early enough to be usable for authentication? Exactly

Private keys from examples/certficates are not encrypted. Open it in an editor and you will see -----BEGIN PRIVATE KEY-----. Encrypted private keys have -----BEGIN ENCRYPTED PRIVATE KEY-----.

> Can you provide the server logs? Here it is. Log level = DEBUG. ``` DEBUG:asyncio:Using selector: EpollSelector INFO:asyncua.server.internal_session:Created internal session Internal INFO:asyncua.server.address_space:add_node: while adding node i=15957, requested parent node...

UaExpert log ``` 15:56:55.641 | Server Node | FreeOpcUa Python Server | Endpoint: 'opc.tcp://127.0.0.1:4840/freeopcua/server/' 15:56:55.641 | Server Node | FreeOpcUa Python Server | Security policy: 'http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256' 15:56:55.641 | Server Node...