Opened 6 hours ago

Last modified 5 hours ago

#71312 new defect

Stop using xml-security-c

Reported by: scantor (Scott Cantor) Owned by:
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: barracuda156, nerdling (Jeremy Lavergne)
Port: xml-security-c, wt, opensaml, shibboleth, xmltooling

Description

This code base was officially retired by Apache a few months back and nobody should be relying on it, so all dependent ports should definitely move off it.

The Shibboleth Project forked the code for its own use, but the latest version of the SP is relying on a new major version of the forked code that removed a lot of APIs from the library, so there's no reason to assume bumping it to that forked version would support any of the other dependent ports aside from ours.

Change History (2)

comment:1 Changed 5 hours ago by ryandesign (Ryan Carsten Schmidt)

Cc: barracuda156 nerdling added
Port: wt opensaml shibboleth xmltooling added

comment:2 Changed 5 hours ago by scantor (Scott Cantor)

Was hoping my three Shibboleth ports might be almost all of them using this, looks like that's close to true.

I have no qualms about pulling xmltooling/opensaml/shibboleth outright if that's helpful, and gets us close to being able to pull this one.

Note: See TracTickets for help on using tickets.