Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
23 commits
Select commit Hold shift + click to select a range
af58515
SEC-2914 dynamic_permissions working
colmenero Mar 18, 2026
991915c
SEC-2914 connextdds_generate_security_artifacts in dynamic
colmenero Mar 18, 2026
339830d
SEC-2914 lws interoperability example
colmenero Mar 19, 2026
acf6364
SEC-2914 cds example
colmenero Mar 19, 2026
3170bfa
SEC-2914 cmake find components for cds example
colmenero Mar 19, 2026
7a7e359
SEC-2914 whitelist example
colmenero Mar 19, 2026
09241bd
SEC-2914 certificate_revocation_list example
colmenero Mar 19, 2026
35a524c
SEC-2914 formatting
colmenero Mar 19, 2026
220f78e
wrong casing in file path
colmenero Mar 19, 2026
e68b3b1
SEC-2914 fix grant number
colmenero Mar 19, 2026
28443f9
SEC-2914 fix leftover passphrase
colmenero Mar 19, 2026
4712746
SEC-2914 fix current source dir wrong variable
colmenero Mar 19, 2026
3c11ca4
SEC-2914 avoid recursivity in cds example profile
colmenero Mar 19, 2026
a3b4f8d
SEC-2914 removed qos copy because it is done by connextdds_add_example
colmenero Mar 19, 2026
e4f99ea
SEC-2914: Update release number for schema in QoS
colmenero Apr 13, 2026
8971c51
SEC-2914 Use domain range in Governance and Permissions
colmenero Apr 13, 2026
38302e0
SEC-2914 allow subscribing to all and protect all
colmenero Apr 13, 2026
2ad7b8e
SEC-2914 Protect metrics and logs in missing Governance Documents
colmenero Apr 13, 2026
6a12d74
SEC-2914 CRL example - restrict monitoring DP permissions
colmenero Apr 13, 2026
72984d1
SEC-2914: Move profile to base name attribute
colmenero Apr 13, 2026
61cc6b1
SEC-2914 cds example inherit from Generic.Monitoring2
colmenero Apr 13, 2026
f784c1f
SEC-2914 snippets for composition and profiles for inheritance
colmenero Apr 13, 2026
31943b1
SEC-2914 fix missing snippet tag
colmenero Apr 13, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.7.0/rti_dds_qos_profiles.xsd">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_Profile" base_name="BuiltinQosLibExp::Generic.StrictReliable" is_default_qos="true">
<domain_participant_qos>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.7.0/rti_dds_qos_profiles.xsd">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_Profile" base_name="BuiltinQosLibExp::Generic.StrictReliable" is_default_qos="true">
<domain_participant_qos>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.7.0/rti_dds_qos_profiles.xsd">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_Profile" base_name="BuiltinQosLibExp::Generic.StrictReliable" is_default_qos="true">
<domain_participant_qos>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.7.0/rti_dds_qos_profiles.xsd">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_Profile" base_name="BuiltinQosLibExp::Generic.StrictReliable" is_default_qos="true">
<domain_participant_qos>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.7.0/rti_dds_qos_profiles.xsd"
version="7.0.0">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_Profile" base_name="BuiltinQosLibExp::Generic.StrictReliable" is_default_qos="true">
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,11 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.7.0/rti_dds_qos_profiles.xsd">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_ProfileA" base_name="BuiltinQosLib::Generic.Security" is_default_qos="true">
<qos_profile name="network_capture_SnippetCommon">
<?rti-qos_snippet?>

<domain_participant_qos>
<property>
<value>
Expand All @@ -21,20 +23,45 @@
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
</element>
<element>
<name>dds.sec.access.permissions_ca</name>
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
<name>dds.sec.crypto.rtps_psk_secret_passphrase</name>
<value>data:,0:PLEASE-CHANGE-THIS-DEFAULT-SEED</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileA" is_default_qos="true">
<base_name>
<element>network_capture_Library::network_capture_SnippetCommon</element>
<element>BuiltinQosSnippetLib::Feature.Security.Enable</element>
</base_name>
<participant_factory_qos>
<monitoring>
<distribution_settings>
<dedicated_participant>
<participant_qos_profile_name>network_capture_Library::network_capture_ProfileMonitor</participant_qos_profile_name>
</dedicated_participant>
</distribution_settings>
</monitoring>
</participant_factory_qos>
<domain_participant_qos>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
Expand Down Expand Up @@ -72,5 +99,37 @@
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileMonitor" base_name="BuiltinQosLib::Generic.Monitoring2">
<base_name>
<element>network_capture_Library::network_capture_SnippetCommon</element>
<element>BuiltinQosSnippetLib::Feature.Security.Enable</element>
</base_name>
<domain_participant_qos>
<resource_limits>
<participant_property_string_max_length>
8192
</participant_property_string_max_length>
<participant_property_list_max_length>
40
</participant_property_list_max_length>
</resource_limits>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peerM_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peerM_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
<value>file:security/ecdsa01/xml/signed/signed_PermissionsM.p7s</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
</qos_library>
</dds>
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,11 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.7.0/rti_dds_qos_profiles.xsd">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_ProfileA" base_name="BuiltinQosLib::Generic.Security" is_default_qos="true">
<qos_profile name="network_capture_SnippetCommon">
<?rti-qos_snippet?>

<domain_participant_qos>
<property>
<value>
Expand All @@ -21,20 +23,45 @@
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
</element>
<element>
<name>dds.sec.access.permissions_ca</name>
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
<name>dds.sec.crypto.rtps_psk_secret_passphrase</name>
<value>data:,0:PLEASE-CHANGE-THIS-DEFAULT-SEED</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileA" is_default_qos="true">
<base_name>
<element>network_capture_Library::network_capture_SnippetCommon</element>
<element>BuiltinQosSnippetLib::Feature.Security.Enable</element>
</base_name>
<participant_factory_qos>
<monitoring>
<distribution_settings>
<dedicated_participant>
<participant_qos_profile_name>network_capture_Library::network_capture_ProfileMonitor</participant_qos_profile_name>
</dedicated_participant>
</distribution_settings>
</monitoring>
</participant_factory_qos>
<domain_participant_qos>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
Expand Down Expand Up @@ -72,5 +99,37 @@
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileMonitor" base_name="BuiltinQosLib::Generic.Monitoring2">
<base_name>
<element>network_capture_Library::network_capture_SnippetCommon</element>
<element>BuiltinQosSnippetLib::Feature.Security.Enable</element>
</base_name>
<domain_participant_qos>
<resource_limits>
<participant_property_string_max_length>
8192
</participant_property_string_max_length>
<participant_property_list_max_length>
40
</participant_property_list_max_length>
</resource_limits>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peerM_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peerM_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
<value>file:security/ecdsa01/xml/signed/signed_PermissionsM.p7s</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
</qos_library>
</dds>
Original file line number Diff line number Diff line change
Expand Up @@ -58,12 +58,8 @@
<security>
<property>
<element>
<name>com.rti.serv.secure.authentication.participant_discovery_protection_key</name>
<value>str:key1</value>
</element>
<element>
<name>com.rti.serv.secure.cryptography.rtps_protection_key</name>
<value>str:key0</value>
<name>dds.sec.crypto.rtps_psk_secret_passphrase</name>
<value>data:,0:PLEASE-CHANGE-THIS-DEFAULT-SEED</value>
</element>
</property>
</security>
Expand Down
Loading