Change report from Azbil Corporation.

Stack/Opc.Ua.Core/Security/Certificates/CertificateIdentifier.cs

@@ -256,6 +256,61 @@ public async Task<X509Certificate2> Find(bool needPrivateKey, string application
             return certificate;
         }
 
+        /// <summary>
+        /// Azbil: Finds a certificate within the validity period in a store.
+        /// </summary>
+        /// <remarks>The certificate type is used to match the signature and public key type. And check also validity period.</remarks>
+        /// <param name="needPrivateKey">if set to <c>true</c> the returned certificate must contain the private key.</param>
+        /// <param name="dateTime">The time to check the validity period.</param>
+        /// <returns>An instance of the <see cref="X509Certificate2"/> that is embedded by this instance or find it in 
+        /// the selected store pointed out by the <see cref="StorePath"/> using selected <see cref="SubjectName"/> or if specified applicationUri.</returns>
+        public async Task<X509Certificate2> Find(bool needPrivateKey, DateTime dateTime)
+        {
+            X509Certificate2 certificate = null;
+
+            // check if the entire certificate has been specified.
+            if (m_certificate != null && (!needPrivateKey || m_certificate.HasPrivateKey))
+            {
+                certificate = m_certificate;
+            }
+            else
+            {
+                // open store.
+                using (ICertificateStore store = CertificateStoreIdentifier.CreateStore(StoreType))
+                {
+                    store.Open(StorePath);
+
+                    X509Certificate2Collection collection = await store.Enumerate().ConfigureAwait(false);
+
+                    certificate = Find(collection, m_thumbprint, m_subjectName, needPrivateKey);
+
+                    if (certificate != null)
+                    {
+                        if (certificate.NotBefore <= dateTime
+                            && dateTime <= certificate.NotAfter)
+                        {
+                            m_certificate = certificate;
+
+                            if (needPrivateKey && this.StoreType == CertificateStoreType.Directory)
+                            {
+                                var message = new StringBuilder();
+                                message.AppendLine("Loaded a certificate with private key from the directory store.");
+                                Utils.Trace(Utils.TraceMasks.Information, message.ToString());
+                            }
+                        }
+                    }
+                }
+            }
+
+            // use the single instance in the certificate cache.
+            if (needPrivateKey)
+            {
+                certificate = m_certificate = CertificateFactory.Load(certificate, true);
+            }
+
+            return certificate;
+        }
+
         /// <summary>
         /// Returns a display name for a certificate.
         /// </summary>

Stack/Opc.Ua.Core/Types/Encoders/BinaryEncoder.cs

@@ -509,7 +509,8 @@ public void WriteString(string fieldName, string value)
         /// </summary>
         public void WriteDateTime(string fieldName, DateTime value)
         {
-            value = Utils.ToOpcUaUniversalTime(value);
+            // Azbil: Comment out the line below to unify the time zone of DateTime handled in requests and responses to UTC.
+            //value = Utils.ToOpcUaUniversalTime(value);
 
             long ticks = value.Ticks;