Apache Santuario

After discussion with the Santuario PMC, it has been decided to address the long term lack of support for the C++ library by formally retiring the code here at Apache. The Java code of course remains well supported and will continue to be developed.

As of now, the C++ code is frozen here. The current sole maintainer will be transferring the source code to the Shibboleth Project and it will be maintained by that team for some period of time because it is a dependency of that software, but it will not be supported for any third-party use. It is estimated that the code will be fully retired some time before 2030. The code will be publically hosted and accessible after the transition, and the license is not changing.

Once the code transition occurs, which may not be for some time yet, we will update more of the site as is appropriate to reflect the transition. In the event a significant issue arises with the library prior to the transition, we will endeavor to address it here.


The software is currently maintained solely at the largesse of the Shibboleth Consortium, which has subsidized all development time on this project for many years. It would likely be unsupported at present if not for that project.

Software Used

The Apache XML Security for C++ package makes heavy use of the Xalan-C and Xerces-C++ libraries from the Apache Software Foundation.

This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software written by Tim Hudson (tjh@cryptsoft.com).

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit.

The license documents for Xerces, Xalan and OpenSSL are contained in the doc directory in SVN and in the doc directory in distributions of the C++ source code.

  • No labels