On Wed, Jun 10, 2020 at 9:19 AM Miroslav Lichvar <mlich...@redhat.com> wrote: > > On Tue, Jun 09, 2020 at 01:27:03AM -0700, Bill Unruh wrote: > > > > On Tue, 9 Jun 2020, Miroslav Lichvar wrote: > > > > > On Tue, Jun 09, 2020 at 12:21:41AM +0200, Vincent Blut wrote: > > > > I must admit CVE-2020-13777 [1] has cooled me down a lot about GnuTLS. > > > > OpenSSL 3.0 (currently in alpha stage) will use the Apache License 2.0 > > > > which > > > > isn’t compatible with the GPLv2. Sigh, what a mess! > > > > Remember GPL3 is not compatible with GPL2. > > Right. We would need to relicense the code. That would require consent > from Richard Curnow and all the contributors. If someone thought it > was realistic and wanted to do all the work, I'd not be against it.
I've only found 14 contributors from grepping for copyright statements, but there may be more. I think this is feasible, although there may be other reasons why Boring/OpenSSL support isn't a priority. If we do do this GPL v3 or later might be worthwhile so we don't need to do it in the future. > > -- > Miroslav Lichvar > > > -- > To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with > "unsubscribe" in the subject. > For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the > subject. > Trouble? Email listmas...@chrony.tuxfamily.org. > -- "Man is born free, but everywhere he is in chains". --Rousseau. -- To unsubscribe email chrony-dev-requ...@chrony.tuxfamily.org with "unsubscribe" in the subject. For help email chrony-dev-requ...@chrony.tuxfamily.org with "help" in the subject. Trouble? Email listmas...@chrony.tuxfamily.org.
