Starting to get questions about getting things to build on OpenSSL 1.1. There are going to be changes needed to xmltooling and Santuario, but I'm more concerned that if the structures become opaque, we may be dead in the water in certain areas.
Once we know the scope of the changes we can assess whether the functionality we lose is used by the SP or not. I'm not optimistic.
Support for 1.0.2 is through 2019, though obviously specific disttributions may jump the gun and create problems.