apacheds-noarch does contain and I think it doesn't need:

servlet spec
commons-logging (use slf4j instead for spring)
bouncycastle:bcprov-jdk15:jar:136 (I think this MUST be removed)


It does not contain and I wonder if it should:
commons-pool for mitosis


Non apache artifacts included (I think):
antlr:antlr:jar:2.7.7
 jdbm:jdbm:jar:1.0
bouncycastle:bcprov-jdk15:jar:136 (I think this MUST be removed)
jug:jug-asl:jar:2.0.0
opensymphony:quartz:jar:1.6.0
org.springframework:spring-core:jar:2.0.6
org.springframework:spring-beans:jar:2.0.6
org.slf4j:jcl104-over-slf4j:jar:1.4.3
org.slf4j:slf4j-log4j12:jar:1.4.3
org.springframework.spring-context:jar:2.0.6
aopalliance:aopalliance:jar:1.0
tanukisoft:wrapper:jar:3.2.3

Bouncycastle -- I believe apache frowns on distributing the actual bouncycastle jar itself due to the claims that it includes an unlicensed implemenation of a software patent. Since it includes jce stuff I think it might make the export classification much stickier also. Its used in core TlsKeyGenerator, I can't judge how necessary this is.

later tonight I plan to construct the legal files for inclusion in the noarch installer jar using the above list of non-apache artifacts included. If any of these can be left out please let me know.

thanks
david jencks


Reply via email to