> On a second look, OpenSAML2 and the SP don't include the OpenSSL > headers directly. Don't Santuario and XMLTooling provide enough abstraction to > eliminate churn on these higher levels? I couldn't say for certain but if the headers are never included, which was certainly a goal, then there shouldn't be any overlap. -- Scott