Now that OpenSAML 2 has been released, we would like to officially clarify the status of the and Shibboleth 1.3.x has reached end of life, the original OpenSAML 1.x branch. Officially, only the latest formal releases of the libraries, both Java and C++ versions of OpenSAML 1.x are supported in any way. This corresponds to OpenSAML-J 1.1b and OpenSAML-C 1.1.1.There is NO support , are completely unsupported.
No further releases of any kind, including security fixes, for any previous releases. (This has been true all along, but this formally clarifies our position.)
With respect to the supported versions, "support" constitutes a promise to address security-related bugs by applying patches to the subversion branch. It may include additional formal releases to incorporate these fixes, but this is NOT guaranteed. Other bug fixes and enhancements are likely to be restricted to issues that impact our ability to continue to support the 1.3.x branch of the Shibboleth code base. Other issues are likely to be ignored.
As far as informal support is concerned, at this stage, very few non-trivial questions are likely to be addressed promptly, if at all. If this is a concern, you should seriously consider planning to migrate your code to OpenSAML 2, or consider a more well-supported library. This is simply a function of the original author's time (or lack thereof) to support this older code.
Finally, our willingness to support this library branch at all is tied to our support of the Shibboleth 1.3.x code base. If at any time, we schedule an EOL date for either the Shibboleth IdP or SP releases on the 1.3 branch, the same EOL date will apply to the legacy OpenSAML branch. We will send a notification to the OpenSAML mailing list at that timeshould be expected.