Compatibility
*************

This release of the |RTI_SP_PRODUCT| includes partial support for the
DDS Security 1.2 Specification from the `Object Management Group
(OMG) <https://www.omg.org/spec/DDS-SECURITY/>`__.

The |RTI_SP_PRODUCT| |CONNEXT_CURRENT_VERSION| are interoperable with the *Security
Plugins* 5.2.7 and higher.

*Persistence Service* databases secured with the |RTI_SP_PRODUCT|
|CONNEXT_CURRENT_VERSION| are incompatible with databases generated by versions of
*Persistence Service* older than 7.0.0.

When using the |RTI_SP_SDK_PRODUCT|, the required minimum version of
CMake is 3.12 if linking dynamically and 3.13 if linking statically.

In release |CONNEXT_CURRENT_VERSION|, the |RTI_SP_PRODUCT| are available for use
with OpenSSL® |OPENSSLVERSION_SHORT| and wolfSSL® |WOLSSLVERSION_SHORT|. There
are separate installation packages for each of these options.

For more information about other backward compatibility issues, see the
*Migration Guide* on the RTI Community Portal (https://community.rti.com/documentation).

Compatibility with OpenSSL 3.5
------------------------------

The |RTI_SP_PRODUCT| |CONNEXT_CURRENT_VERSION| for OpenSSL are API-compatible with
OpenSSL |OPENSSLVERSION_SHORT|. The |RTI_SP_PRODUCT| |CONNEXT_CURRENT_VERSION| have only
been tested by RTI using OpenSSL |OPENSSLVERSION|. OpenSSL |OPENSSLVERSION|
is not compatible with |RTI_SP_PRODUCT| versions that were tested using
OpenSSL 3.0.9 or below.

The |RTI_SP_SDK_PRODUCT| has been tested with OpenSSL |OPENSSLVERSION|.

Compatibility with wolfSSL 5.8
------------------------------

The |RTI_SP_PRODUCT| |CONNEXT_CURRENT_VERSION| for wolfSSL have been tested with
wolfSSL |WOLFSSLVERSION|. You can find a list of the supported target platforms
in  :link_connext_dds_pro_rn:`Supported Platforms, in the RTI Connext Core Libraries Release Notes <pam_table.html#supported-platforms>`.

**Limitations when using wolfSSL:**

The |RTI_SP_PRODUCT| for wolfSSL are interoperable with the
|RTI_SP_PRODUCT| for OpenSSL in most configurations. However, there
are some features that are not supported by the |RTI_SP_PRODUCT|
for wolfSSL:

-  Diffie-Hellman: The |RTI_SP_PRODUCT| for wolfSSL only support
   the ECDHE-CEUM+P256 and ECDHE-CEUM+P384 Elliptic Curve
   Diffie-Hellman (ECDHE) key establishment algorithms.
-  RSASSA-PSS-MGF1SHA256+2048+SHA256: The |RTI_SP_PRODUCT| for
   wolfSSL support for digital signatures is limited to the
   RSASSA-PKCS1-V1_5+2048+SHA256, ECDSA-P256+SHA256, and
   ECDSA-P384+SHA384 algorithms.
-  OpenSSL engines/providers are not supported.
- The |RTI_SP_PRODUCT| for wolfSSL do not support
  :abbr:`OCSP (Online Certificate Status Protocol)`.
- If your system configures an RSA Permissions Certificate Authority, generate
  the PKCS7 signed Governance and Permissions Documents using the
  `openssl smime` tool instead of the `openssl cms` tool. Otherwise,
  verification of the PKCS7 document will fail.
