Metadata Distribution Subcommittee of TAC

[Tom Scavo <>]

On Mon, Oct 28, 2013 at 11:48 AM, Cantor, Scott 
<>
 wrote:
>
> On 10/28/13, 11:23 AM, "Tom Scavo" 
> <>
>  wrote:
>
>>- All other (non-Windows) Shibboleth SP deployments are completely
>>dependent on the version of OpenSSL bundled with the underlying
>>operation system.
>
> That's only true on Linux actually. Solaris varies widely and there are
> many different versions one might have, not all of which come from the OS.
>
> On the Mac, the supported approach is macports, which should be a current
> version, but again if it were an old install, it would depend. I don't
> know what version Apple has provided going backwards, it's 0.9.8 on
> Mavericks (yes, really). If you did a source build using their libraries
> and not macports, then, it would depend on the OS.
>
>>- If your metadata process depends on an incompatible version of
>>OpenSSL, the recommended action is to upgrade the underlying operating
>>system.
>
> See above, it's not that simple except on Linux.

Okay, so that's considerably more complicated than I thought. Are
there other possibilities besides Windows, Linux, Solaris, Mac OS X?

In any case, it would be good if you could make a pass over the following FAQ:

"How does this implementation plan affect Shibboleth SP deployments?"

Thanks,

Tom