> Do you have any opinion on maturity of the toolkits.

The Apache version worked much more consistently with the Java version and
was much easier for me to implement the necessary evaluation code around the
core system. xmlsec wanted me to give it control and just implement
callbacks, but sometimes that's not practical.

> My opinion is, that xmllib is more mature and stable.

It has been around longer, yes. I think it has a lot more code, which means
if it's not stable, I couldn't fix it if I needed to (and it's in C, so I
wouldn't want to). That was the major issue for me. Modulo some issues I've
had with c14n, Apache has been very stable for me.

> On the other hand it looks like, that 
> Apache project is more alive (judging from the mailing list, bugs,...).

Most of the traffic here is about Java, not C++. I haven't done anything
with xmlsec in several years, so I couldn't judge its popularity.

-- Scott

Reply via email to