On Sat, Aug 16, 2008 at 5:29 PM, Emmanuel Lecharny <[EMAIL PROTECTED]> wrote: > - follow the export rules : http://apache.org/dev/crypto.html. > > If we include BC encryption code into MINA, we have to declare MINA in the > ASF Product Classification Matrix : > http://apache.org/licenses/exports/#matrix
There is (or at least was) and issue with the BC jar in that it contained an implementation of the patented IDEA algorithm: http://mail-archives.apache.org/mod_mbox/www-legal-discuss/200508.mbox/[EMAIL PROTECTED] if I recall correctly, Geronimo ended up with using a custom built jar the excluded the affected classes. I don't think we want to get into that mess, how about ripping out the very minimal subset we need and including that into our sources (like with the MD5 case)? /niklas
