Absence of org.opensaml.DefaultBootstrap class

[Tom Zeller]

On Fri, Jun 3, 2016 at 6:51 AM, Chiranga Alwis <chirangaalwis at gmail.com> wrote:
> I have been working on a SAML 2.0 based single-sign-on Tomcat valve. Until
> recently, I had been using the Maven dependency opensaml 2.6.4 for my work.
>
> Currently, I have started using OpenSAML 3 Java libraries such as,
> opensaml-core 3.2.0 for my work. But I discovered that one of the pivotal
> Java classes org.opensaml.DefaultBootstrap is no longer present in the new
> Java libraries.
>
> Does this suggest that we no longer need to initialize the OpenSAML
> libraries or is there another alternative Java class I can use for this
> purpose?

No, OpenSAML still needs to be initialized, but in a different way.
Searching for "opensaml initialize site:shibboleth.net" yields a page
which I believe is largely accurate, but package or class names may
have been changed :

https://wiki.shibboleth.net/confluence/display/OS30/Initialization+and+Configuration

> Further, I would be grateful if you could mention whether I am using the
> correct library version for the purpose of using OpenSAML 3.

I know very little about Tomcat valves, so I don't know, but I assume
that upgrading code from OpenSAML 2 to OpenSAML 3 is what you will
want to do. If you are asking if you should develop against OpenSAML
3.2.0 or 3.3.0-SNAPSHOT, I suggest the current release version but you
should keep on eye on the next.

FWIW I have a page on the wiki on which I have tracked various classes
I have needed to change when upgrading OpenSAML :

https://wiki.shibboleth.net/confluence/display/~tzeller@shibboleth.net/Notes+%3A+Updating+code+from+Shibboleth+v2+to+v3