diff --git a/code/DDSCodeTester.cpp b/code/DDSCodeTester.cpp index 58dda0b94..bf4fb9e4c 100644 --- a/code/DDSCodeTester.cpp +++ b/code/DDSCodeTester.cpp @@ -645,6 +645,9 @@ void dds_domain_examples() pqos.properties().properties().emplace_back( "dds.sec.auth.builtin.PKI-DH.preferred_key_agreement", "ECDH"); + pqos.properties().properties().emplace_back( + "dds.sec.auth.builtin.PKI-DH.transmit_algorithms_as_legacy", + "true"); //!-- } { @@ -680,6 +683,9 @@ void dds_domain_examples() pqos.properties().properties().emplace_back( "dds.sec.access.builtin.Access-Permissions.permissions", "file://certs/permissions.smime"); + pqos.properties().properties().emplace_back( + "dds.sec.access.builtin.Access-Permissions.transmit_algorithms_as_legacy", + "true"); //!-- } { diff --git a/code/XMLTester.xml b/code/XMLTester.xml index 40fab6886..21e4964f4 100644 --- a/code/XMLTester.xml +++ b/code/XMLTester.xml @@ -3054,6 +3054,10 @@ dds.sec.auth.builtin.PKI-DH.preferred_key_agreement ECDH + + dds.sec.auth.builtin.PKI-DH.transmit_algorithms_as_legacy + true + @@ -3106,6 +3110,10 @@ dds.sec.access.builtin.Access-Permissions.permissions file://permissions.smime + + dds.sec.access.builtin.Access-Permissions.transmit_algorithms_as_legacy + true + diff --git a/docs/fastdds/property_policies/security.rst b/docs/fastdds/property_policies/security.rst index 81b97b6fd..c462ef15f 100644 --- a/docs/fastdds/property_policies/security.rst +++ b/docs/fastdds/property_policies/security.rst @@ -49,6 +49,9 @@ The following table outlines the properties used for the :ref:`DDS\:Auth\:PKI-DH b) ``ECDH``, ``ECDH+prime256v1-CEUM`` for Elliptic Curve Diffie-Hellman Ephemeral with the NIST P-256 curve. |br| c) ``AUTO`` for selecting the key agreement based on the signature algorithm in the Identity CA's certificate. |br| Will default to ``AUTO`` if the property is not present. + * - ``transmit_algorithms_as_legacy`` *(optional)* + - Whether to transmit algorithm identifiers in non-standard legacy format. |br| + Will default to ``false`` if the property is not present. .. note:: All properties listed above have the ``dds.sec.auth.builtin.PKI-DH."`` prefix. diff --git a/docs/fastdds/security/access_control_plugin/access_control_plugin.rst b/docs/fastdds/security/access_control_plugin/access_control_plugin.rst index ea094aea3..ba6abb077 100644 --- a/docs/fastdds/security/access_control_plugin/access_control_plugin.rst +++ b/docs/fastdds/security/access_control_plugin/access_control_plugin.rst @@ -55,6 +55,9 @@ The following table outlines the properties used for the DDS\:Access\:Permission * - permissions - URI to the Participant permissions document signed by the |br| Permissions CA in S/MIME format. |br| Supported URI schemes: file. + * - transmit_algorithms_as_legacy *(optional)* + - Whether to transmit algorithm identifiers in non-standard legacy format. |br| + Will default to ``false`` if the property is not present. .. note:: All listed properties have "dds.sec.access.builtin.Access-Permissions." prefix. diff --git a/docs/fastdds/security/auth_plugin/auth_plugin.rst b/docs/fastdds/security/auth_plugin/auth_plugin.rst index 96de66885..ffa4dd159 100644 --- a/docs/fastdds/security/auth_plugin/auth_plugin.rst +++ b/docs/fastdds/security/auth_plugin/auth_plugin.rst @@ -64,6 +64,9 @@ The following table outlines the properties used for the DDS:\Auth\:PKI-DH plugi b) ``ECDH``, ``ECDH+prime256v1-CEUM`` for Elliptic Curve Diffie-Hellman Ephemeral with the NIST P-256 curve. |br| c) ``AUTO`` for selecting the key agreement based on the signature algorithm in the Identity CA's certificate. |br| Will default to ``AUTO`` if the property is not present. + * - transmit_algorithms_as_legacy *(optional)* + - Whether to transmit algorithm identifiers in non-standard legacy format. |br| + Will default to ``false`` if the property is not present. .. note:: All listed properties have "dds.sec.auth.builtin.PKI-DH." prefix.