shib IdP size

Michael R. Gettes gettes at cmu.edu
Wed May 30 19:43:17 BST 2012


SOLD!  300K!

Thank you all!

/mrg

On May 30, 2012, at 14:39, Brent Putman wrote:

> 
> On 5/30/12 2:25 PM, Kevin P. Foote wrote:
>> -> 
>> -> There's no useful place to draw the line. You'd almost certainly have to
>> -> include the XML layer if you're talking security relevance, and that's all
>> -> ASF code.
> 
> Yeah, as is also said about software written without a clear
> specification: without further clarification of what the intent and
> scope is, no number we can come up with will be "wrong", merely
> "surprising". 
> 
> A simple line count (wc -l) of "our" Java code in the IdP (and just the
> .java files) produces this:
> 
> java-opensaml2
>  124689 total
> java-openws
>   41672 total
> java-xmltooling
>   70200 total
> 
> java-shib-common
>   45529 total
> java-shib-idp2
>   16359 total
> 
> That's roughly 300K.  As you can see, the OpenSAML stack dwarfs the
> actual Shib code.  And these numbers include Javadoc/comments, blank
> lines, etc.  In other words, probably not what they actually want....
> 
> Apache xmlsec is also large:
> 
> ../../Eclipse/shib2WS/ApacheSantuario/
>   79788 total
> 
> 
> I don't have Xerces/Xalan checked out, I'm sure they are quite large as
> well.  And then there's the other zillion library dependencies of the
> IdP (many of which we only use a small portion of, so what "counts"?). 
> Where does one draw the line?
> 
> 
> 
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list