Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,9 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.6.0/rti_dds_qos_profiles.xsd">
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this be 7.7.0 already?

<qos_library name="network_capture_Library">
<qos_profile name="network_capture_ProfileA" base_name="BuiltinQosLib::Generic.Security" is_default_qos="true">
<qos_profile name="network_capture_ProfileCommon" base_name="BuiltinQosLib::Generic.Security" >
<domain_participant_qos>
<property>
<value>
Expand All @@ -21,20 +21,41 @@
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
</element>
<element>
<name>dds.sec.access.permissions_ca</name>
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
<name>dds.sec.crypto.rtps_psk_secret_passphrase</name>
<value>data:,0:PLEASE-CHANGE-THIS-DEFAULT-SEED</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileA" base_name="network_capture_ProfileCommon" is_default_qos="true">
<participant_factory_qos>
<monitoring>
<distribution_settings>
<dedicated_participant>
<participant_qos_profile_name>network_capture_Library::network_capture_ProfileMonitor</participant_qos_profile_name>
</dedicated_participant>
</distribution_settings>
</monitoring>
</participant_factory_qos>
<domain_participant_qos>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
Expand Down Expand Up @@ -72,5 +93,37 @@
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileMonitor">
<base_name>
<element>network_capture_Library::network_capture_ProfileCommon</element>
<element>BuiltinQosLib::Generic.Monitoring2</element>
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this composition goes against our best practices. See: Best Practices for Inheritance and Composition: Use QoS Profiles for inheritance only, never composition. None of these two are snippets.

If you want to follow this approach, I would use base_name="BuiltinQosLib::Generic.Monitoring2" here and create a snippet with just the Security properties,

</base_name>
<domain_participant_qos>
<resource_limits>
<participant_property_string_max_length>
8192
</participant_property_string_max_length>
<participant_property_list_max_length>
40
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we really need 40 properties here? That seems too much.

</participant_property_list_max_length>
</resource_limits>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peerM_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peerM_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
<value>file:security/ecdsa01/xml/signed/signed_PermissionsM.p7s</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
</qos_library>
</dds>
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,9 @@
use the software.
-->
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.0.0/rti_dds_qos_profiles.xsd">
xsi:noNamespaceSchemaLocation="http://community.rti.com/schema/7.6.0/rti_dds_qos_profiles.xsd">
<qos_library name="network_capture_Library">
<qos_profile name="network_capture_ProfileA" base_name="BuiltinQosLib::Generic.Security" is_default_qos="true">
<qos_profile name="network_capture_ProfileCommon" base_name="BuiltinQosLib::Generic.Security" >
<domain_participant_qos>
<property>
<value>
Expand All @@ -21,20 +21,41 @@
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
</element>
<element>
<name>dds.sec.access.permissions_ca</name>
<value>file:security/ecdsa01/certs/ca_cert.pem</value>
</element>
<element>
<name>dds.sec.access.governance</name>
<value>file:security/ecdsa01/xml/signed/signed_Governance.p7s</value>
<name>dds.sec.crypto.rtps_psk_secret_passphrase</name>
<value>data:,0:PLEASE-CHANGE-THIS-DEFAULT-SEED</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileA" base_name="network_capture_Library::network_capture_ProfileCommon" is_default_qos="true">
<participant_factory_qos>
<monitoring>
<distribution_settings>
<dedicated_participant>
<participant_qos_profile_name>network_capture_Library::network_capture_ProfileMonitor</participant_qos_profile_name>
</dedicated_participant>
</distribution_settings>
</monitoring>
</participant_factory_qos>
<domain_participant_qos>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peer1_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peer1_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
Expand Down Expand Up @@ -72,5 +93,37 @@
</property>
</domain_participant_qos>
</qos_profile>
<qos_profile name="network_capture_ProfileMonitor">
<base_name>
<element>network_capture_Library::network_capture_ProfileCommon</element>
<element>BuiltinQosLib::Generic.Monitoring2</element>
</base_name>
<domain_participant_qos>
<resource_limits>
<participant_property_string_max_length>
8192
</participant_property_string_max_length>
<participant_property_list_max_length>
40
</participant_property_list_max_length>
</resource_limits>
<property>
<value>
<element>
<name>dds.sec.auth.identity_certificate</name>
<value>file:security/ecdsa01/certs/peerM_cert.pem</value>
</element>
<element>
<name>dds.sec.auth.private_key</name>
<value>file:security/ecdsa01/certs/peerM_key.pem</value>
</element>
<element>
<name>dds.sec.access.permissions</name>
<value>file:security/ecdsa01/xml/signed/signed_PermissionsM.p7s</value>
</element>
</value>
</property>
</domain_participant_qos>
</qos_profile>
</qos_library>
</dds>
Original file line number Diff line number Diff line change
Expand Up @@ -58,12 +58,8 @@
<security>
<property>
<element>
<name>com.rti.serv.secure.authentication.participant_discovery_protection_key</name>
<value>str:key1</value>
</element>
<element>
<name>com.rti.serv.secure.cryptography.rtps_protection_key</name>
<value>str:key0</value>
<name>dds.sec.crypto.rtps_psk_secret_passphrase</name>
<value>data:,0:PLEASE-CHANGE-THIS-DEFAULT-SEED</value>
</element>
</property>
</security>
Expand Down
Loading
Loading