7049469289
An update for the security documentation that is part of the CycloneDDS manual: - added openssl commands for creating a set of CA and identity certificates - code fragment for setting security by qos and example of xml security config - commands for signing governance and permissions documents using openssl Signed-off-by: Dennis Potman <dennis.potman@adlinktech.com>
39 lines
No EOL
1.2 KiB
XML
39 lines
No EOL
1.2 KiB
XML
<?xml version="1.0" encoding="utf-8" ?>
|
|
<dds xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:noNamespaceSchemaLocation="https://www.omg.org/spec/DDS-SECURITY/20170901/omg_shared_ca_permissions.xsd">
|
|
<permissions>
|
|
<grant name="default_permissions">
|
|
<subject_name>emailAddress=alice@cycloneddssecurity.adlinktech.com,CN=Alice Example,O=Example Organization,OU=Organizational Unit Name,L=Locality Name,ST=OV,C=NL</subject_name>
|
|
<validity>
|
|
<!-- Format is CCYY-MM-DDThh:mm:ss[Z|(+|-)hh:mm] in GMT -->
|
|
<not_before>2020-01-01T01:00:00</not_before>
|
|
<not_after>2120-01-01T01:00:00</not_after>
|
|
</validity>
|
|
<allow_rule>
|
|
<domains>
|
|
<id_range>
|
|
<min>0</min>
|
|
<max>230</max>
|
|
</id_range>
|
|
</domains>
|
|
<publish>
|
|
<topics>
|
|
<topic>*</topic>
|
|
</topics>
|
|
<partitions>
|
|
<partition>*</partition>
|
|
</partitions>
|
|
</publish>
|
|
<subscribe>
|
|
<topics>
|
|
<topic>*</topic>
|
|
</topics>
|
|
<partitions>
|
|
<partition>*</partition>
|
|
</partitions>
|
|
</subscribe>
|
|
</allow_rule>
|
|
<default>DENY</default>
|
|
</grant>
|
|
</permissions>
|
|
</dds> |