Make GDS Tests use ECC for connection. Update Certificate wait check to use polling mechanism.

[romanett]

Proposed changes

Make GDS Tests use ECC for connection. Update Certificate wait check to use polling mechanism

Related Issues

• Fixes #

Types of changes

• Bugfix (non-breaking change which fixes an issue)
• Enhancement (non-breaking change which adds functionality)
• Test enhancement (non-breaking change to increase test coverage)
• Breaking change (fix or feature that would cause existing functionality to not work as expected, requires version increase of Nuget packages)
• Documentation Update (if none of the other choices apply)

Checklist

• I have read the CONTRIBUTING doc.
• I have signed the CLA.
• I ran tests locally with my changes, all passed.
• I fixed all failing tests in the CI pipelines.
• I fixed all introduced issues with CodeQL and LGTM.
• I have added tests that prove my fix is effective or that my feature works and increased code coverage.
• I have added necessary documentation (if appropriate).
• Any dependent changes have been merged and published in downstream modules.

Further comments

[Copilot]

Pull Request Overview

This PR enhances GDS (Global Discovery Server) tests to use ECC (Elliptic Curve Cryptography) for connections and improves certificate waiting mechanisms with a polling approach. The changes focus on modernizing the test infrastructure to support multiple certificate types and making asynchronous operations more reliable.

Key changes:

• Added ECC certificate support for GDS test clients with new certificate configurations
• Converted synchronous test methods to async patterns throughout the codebase
• Implemented polling mechanism for certificate verification instead of fixed waits
• Enhanced endpoint selection to support specific security policies including ECC variants

Reviewed Changes

Copilot reviewed 20 out of 20 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
Tests/Opc.Ua.Gds.Tests/ServerConfigurationPushTestClient.cs	Added async disconnect method and endpoint connection logic for security policy selection
Tests/Opc.Ua.Gds.Tests/PushTest.cs	Converted all test methods to async, added ECC certificate types, implemented polling for certificate verification
Tests/Opc.Ua.Gds.Tests/Opc.Ua.ServerConfigurationPushTestClient.Config.xml	Added ECC certificate configurations (NistP256, NistP384, BrainpoolP256r1, BrainpoolP384r1)
Tests/Opc.Ua.Gds.Tests/Opc.Ua.GlobalDiscoveryTestServer.Config.xml	Added ECC security policies and removed explicit security policy URIs from user token policies
Tests/Opc.Ua.Gds.Tests/Opc.Ua.GlobalDiscoveryTestClient.Config.xml	Added ECC certificate configurations matching the push test client
Tests/Opc.Ua.Gds.Tests/GlobalDiscoveryTestServer.cs	Added ECC and standard sign/encrypt security policies to server configuration
Tests/Opc.Ua.Gds.Tests/GlobalDiscoveryTestClient.cs	Added endpoint selection logic, async methods, and certificate store cleanup
Tests/Opc.Ua.Gds.Tests/ClientTest.cs	Converted all test methods to async patterns for GDS client operations
Libraries/Opc.Ua.Server/Configuration/ConfigurationNodeManager.cs	Added null check for certificate and improved private key loading with application URI
Libraries/Opc.Ua.Gds.Client.Common/ServerPushConfigurationClient.cs	Added async methods with cancellation token support, deprecated synchronous methods
Libraries/Opc.Ua.Gds.Client.Common/LocalDiscoveryServerClient.cs	Added async discovery methods with cancellation token support
Libraries/Opc.Ua.Gds.Client.Common/GlobalDiscoveryServerClient.cs	Added async GDS client methods with cancellation token support and endpoint property

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[codecov]

Codecov Report

❌ Patch coverage is 63.15789% with 42 lines in your changes missing coverage. Please review.
✅ Project coverage is 57.88%. Comparing base (2aa7ed3) to head (5871e90).
⚠️ Report is 1 commits behind head on master.

Files with missing lines	Patch %	Lines
...pc.Ua.Gds.Server.Common/ApplicationsNodeManager.cs	59.30%	30 Missing and 5 partials ⚠️
...a.Gds.Client.Common/GlobalDiscoveryServerClient.cs	41.66%	5 Missing and 2 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3167      +/-   ##
==========================================
- Coverage   58.03%   57.88%   -0.16%     
==========================================
  Files         353      351       -2     
  Lines       80453    80471      +18     
  Branches    14025    14028       +3     
==========================================
- Hits        46693    46577     -116     
- Misses      29525    29595      +70     
- Partials     4235     4299      +64     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[romanett]

Linux Issue with ECC Transport:

Failed UpdateCertificateNewKeyPairPEMAsync [1 s]
Error Message:
 System.Security.Cryptography.CryptographicException : m_safeCertContext is an invalid handle.
Stack Trace:
   at Opc.Ua.EccUtils.GetPublicKey(X509Certificate2 certificate, String[]& securityPolicyUris) in /_/Stack/Opc.Ua.Core/Security/Certificates/EccUtils.cs:line 211
 at Opc.Ua.EccUtils.Verify(ArraySegment`1 dataToVerify, Byte[] signature, X509Certificate2 signingCertificate, HashAlgorithmName algorithm) in /_/Stack/Opc.Ua.Core/Security/Certificates/EccUtils.cs:line 488
 at Opc.Ua.SecurityPolicies.Verify(X509Certificate2 certificate, String securityPolicyUri, Byte[] dataToVerify, SignatureData signature) in /_/Stack/Opc.Ua.Core/Security/Constants/SecurityPolicies.cs:line 606
 at Opc.Ua.Client.Session.ValidateServerSignature(X509Certificate2 serverCertificate, SignatureData serverSignature, Byte[] clientCertificateData, Byte[] clientCertificateChainData, Byte[] clientNonce) in /_/Libraries/Opc.Ua.Client/Session/Session.cs:line 5644
 at Opc.Ua.Client.Session.OpenAsync(String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, Boolean checkDomain, Boolean closeChannel, CancellationToken ct) in /_/Libraries/Opc.Ua.Client/Session/SessionAsync.cs:line 249
 at Opc.Ua.Client.Session.OpenAsync(String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, Boolean checkDomain, Boolean closeChannel, CancellationToken ct) in /_/Libraries/Opc.Ua.Client/Session/SessionAsync.cs:line 400
 at Opc.Ua.Client.Session.CreateAsync(ISessionInstantiator sessionInstantiator, ApplicationConfiguration configuration, ITransportWaitingConnection connection, ConfiguredEndpoint endpoint, Boolean updateBeforeConnect, Boolean checkDomain, String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, CancellationToken ct) in /_/Libraries/Opc.Ua.Client/Session/Session.cs:line 1189
 at Opc.Ua.Client.DefaultSessionFactory.CreateAsync(ApplicationConfiguration configuration, ConfiguredEndpoint endpoint, Boolean updateBeforeConnect, Boolean checkDomain, String sessionName, UInt32 sessionTimeout, IUserIdentity identity, IList`1 preferredLocales, CancellationToken ct) in /_/Libraries/Opc.Ua.Client/Session/Factory/DefaultSessionFactory.cs:line 90
 at Opc.Ua.Gds.Client.GlobalDiscoveryServerClient.ConnectAsync(ConfiguredEndpoint endpoint, CancellationToken ct) in /_/Libraries/Opc.Ua.Gds.Client.Common/GlobalDiscoveryServerClient.cs:line 387
 at Opc.Ua.Gds.Client.GlobalDiscoveryServerClient.ConnectAsync(String endpointUrl, CancellationToken ct) in /_/Libraries/Opc.Ua.Gds.Client.Common/GlobalDiscoveryServerClient.cs:line 336
 at Opc.Ua.Gds.Tests.PushTest.VerifyNewPushServerCertAsync(Byte[] certificateBlob) in /_/Tests/Opc.Ua.Gds.Tests/PushTest.cs:line 1003
 at Opc.Ua.Gds.Tests.PushTest.UpdateCertificateWithNewKeyPairAsync(String keyFormat) in /_/Tests/Opc.Ua.Gds.Tests/PushTest.cs:line 849
 at Opc.Ua.Gds.Tests.PushTest.UpdateCertificateNewKeyPairPEMAsync() in /_/Tests/Opc.Ua.Gds.Tests/PushTest.cs:line 784