Shibboleth and OpenSSL 1.1

Ferenc Wágner wferi at
Mon Oct 31 06:51:00 UTC 2016

"Cantor, Scott" <cantor.2 at> writes:

>> Many thanks for the overview, Scott.  If I understand you right,
>> Santuario is only the tip of the iceberg: XMLTooling, OpenSAML and the
>> SP use the structure fields exposed by OpenSSL 1.0 to do their job, and
>> it isn't yet clear whether 1.1 provides the necessary interface at all.
> I think Rod already has it all building so he believes the work is
> mostly done. But that still leaves a lot of testing and getting
> Santuario dealt with.

On a second look, OpenSAML2 and the SP don't include the OpenSSL headers
directly.  Don't Santuario and XMLTooling provide enough abstraction to
eliminate churn on these higher levels?

More information about the Pkg-shibboleth-devel mailing list