Compatibility
=============

This release of the *Security Plugins* includes partial support for the
DDS Security specification from the `Object Management Group
(OMG) <http://www.omg.org/spec/DDS-SECURITY/1.1/>`__.

The *Security Plugins* |VERSION| are interoperable with the *Security
Plugins* 5.2.7 and higher.

*Persistence Service* databases secured with the *Security Plugins*
7.2.0 are incompatible with databases generated by versions of
*Persistence Service* older than 7.0.0.

When using the *Security Plugins SDK*, the required minimum version of
CMake is 3.12 if linking dynamically and 3.13 if linking statically.

In release |VERSION|, the *Security Plugins* are available for use
with OpenSSL® |OPENSSLVERSION_EOLSHORT|, OpenSSL
|OPENSSLVERSION_SHORT|, and wolfSSL® |WOLSSLVERSION_SHORT|. There
are separate installation packages for each of these options.

For more information about other backward compatibility issues, see the
|MIGRATIONGUIDECOMMPORTAL|.

Compatibility with OpenSSL 1.1.1 and 3.0
----------------------------------------

The *Security Plugins* |VERSION| for OpenSSL are API-compatible with
OpenSSL 1.1.0 - |OPENSSLVERSION_EOL|, and
OpenSSL |OPENSSLVERSION_SHORT|. The *Security Plugins 7.1.0* have only
been tested by RTI using OpenSSL |OPENSSLVERSION_EOL| and
|OPENSSLVERSION|.

The *Security Plugins* SDK has been tested with
OpenSSL |OPENSSLVERSION_EOL| and |OPENSSLVERSION|.

Limitations when using OpenSSL

The *Security Plugins* for OpenSSL |OPENSSLVERSION_SHORT| do not
support the OpenSSL Provider API, which is the OpenSSL
|OPENSSLVERSION_SHORT| replacement for OpenSSL 1.1's Engine API.
OpenSSL |OPENSSLVERSION_SHORT| no longer supports the Engine API.

Compatibility with wolfSSL 5.5
------------------------------

The *Security Plugins* |VERSION| for wolfSSL have been tested with
wolfSSL |WOLFSSLVERSION| on following target platform:

-  QNX® Neutrino® 7.1 systems on Arm® v8 CPUs
   (RTI architecture: armv8QNX7.1qcc_gpp8.3.0)

.. container::

   Limitations when using wolfSSL

   The *Security Plugins* for wolfSSL are interoperable with the
   *Security Plugins* for OpenSSL in most configurations. However, there
   are some features that are not supported by the *Security Plugins*
   for wolfSSL:

   -  Diffie-Hellman: The *Security Plugins* for wolfSSL only support
      the ECDHE-CEUM+P256 and ECDHE-CEUM+P384 Elliptic Curve
      Diffie-Hellman (ECDHE) key establishment algorithms.
   -  RSASSA-PSS-MGF1SHA256+2048+SHA256: The *Security Plugins* for
      wolfSSL support for digital signatures is limited to the
      RSASSA-PKCS1-V1_5+2048+SHA256, ECDSA-P256+SHA256, and
      ECDSA-P384+SHA384 algorithms.
   -  OpenSSL engines are not supported.