Is the OpenSAML C++ library still supported or end of life

Cantor, Scott cantor.2 at osu.edu
Tue Apr 5 21:31:00 UTC 2022


On 4/5/22, 4:56 PM, "dev on behalf of Clayton, Clint via dev" <dev-bounces at shibboleth.net on behalf of dev at shibboleth.net> wrote:

>    Is the OpenSAML C++ library still supported or end of life? Is it still getting security fixes?

For the purposes of the Shibboleth SP, yes, for anything else, it's never been supported in any meaningful sense. The code has no future in general, and is built on XML libraries that are de facto unsupported, I'm forced to keep them plausibly viable only for as long as the SP exists in this form. All this code is destined for the scrap heap this decade, as I have been public and vocal about on the relevant lists.

> From https://shibboleth.atlassian.net/wiki/spaces/OS30/overview it mentions v3 has reached end of life

That's more or less referring to Java. The C++ code never had any sort of online presence to speak of though there were materials in the wiki in the early days.

-- Scott




More information about the dev mailing list