Hi Tim,
The md5 implementation from RSA Data Security, Inc. does not have a
DFSG-compatible licence - it permits you to make and use derivative
works, but not to redistribute those works, iirc.
Please see this thread already discussed for INN:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405354
It points to the following clarification:
http://www.ietf.org/ietf/IPR/RSA-MD-all
Implementations of these message-digest algorithms, including
implementations derived from the reference C code in RFC-1319, RFC-1320, and
RFC-1321, may be made, used, and sold without license from RSA for any
purpose.
Therefore, RSA's license allows to redistribute a work based upon RFC 1321.
--
Julien ÉLIE
« Si le peuple est content des jeux, je te donnerai des sesterces.
S'il n'est pas content, je te donnerai aux lions ! » (Astérix)