Shibboleth Developers

[Scott Cantor <>]

Just to keep everyone else not on IRC in the loop, I've basically concluded
that they've been updating xmlsec all this time without actually formally
releasing an update.

One of their CVS branches includes a work-around to make it possible to use
the JDK's broken Xalan build, which ought to stop these random exceptions,
so I'm testing a more current build. So far it seems fine.

I don't think pragmatically we'll update our 1.1 branch, but dropping the
updated jars into an origin warfile should fix it if this is the problem.
I'll send a note once I've load tested an origin running the new libraries.

-- Scott