[prev in list] [next in list] [prev in thread] [next in thread] 

List:       xmlrpc-user
Subject:    [jira] [Commented] (WSS-687) Upgrade OpenSAML to v4.1.x
From:       Francesco_Chicchiriccò_(Jira) <jira () apache ! org>
Date:       2022-03-07 9:02:00
Message-ID: JIRA.13394442.1628600709000.393307.1646643720487 () Atlassian ! JIRA
[Download RAW message or body]


    [ https://issues.apache.org/jira/browse/WSS-687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17502152#comment-17502152 \
] 

Francesco Chicchiriccò commented on WSS-687:
--------------------------------------------

About:

{quote}
In addition, OpenSAML 4.1.1 is not available in Maven Central which would be a \
requirement for me to OK moving to it. {quote}

I can see there is a quite long and unfortunate debate on the topic.

I don't think that the Shibboleth team is like to publish their artifacts to Maven \
Central - see https://shibboleth.atlassian.net/wiki/spaces/DEV/pages/1123844333/Use+of+Maven+Central \
- hence I would propose to include their Maven repo instead of relying to older and \
possibly unsafe artifacts.

> Upgrade OpenSAML to v4.1.x
> --------------------------
> 
> Key: WSS-687
> URL: https://issues.apache.org/jira/browse/WSS-687
> Project: WSS4J
> Issue Type: Task
> Components: WSS4J Core
> Affects Versions: 2.5.0
> Reporter: Misagh Moayyed
> Assignee: Colm O hEigeartaigh
> Priority: Major
> 
> wss4j 2.5.0.SNAPSHOT currently uses OpenSAML v4.0.x. Current release of OpenSAML is \
> 4.1.1 and wss4j should upgrade to this version. No breaking changes are expected. I \
> can assist with a patch or pull request.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org


[prev in list] [next in list] [prev in thread] [next in thread]