Re: [Adrian Bunk: Bug#65368: libssl09 must go to non-US/non-free]

[Richard Levitte - VMS Whacker]

From: Christoph Martin <[EMAIL PROTECTED]>

martin> I am responsible for the packaging of openssl for Debian
martin> Linux.  Now we have some problems with the license issues.
martin> You point out good enough that some of the algorythms in the
martin> package have copyright or license issues. 

You mean patenting issues, or?  Without that, copyright and licensing
isn't an issue unless exact copies of copyrighted or licensed source
has been put into OpenSSL, and as far as I know that hasn't been done.
Patenting and licensing/copyright are two different things and should
not be mixed up.

martin> With the Debian policy it is not allowed to include nonfree
martin> software.  nonfree software has to go into the nonfree
martin> section.

martin> We could build a version which lacks the problematic parts,
martin> but then again the sources must be free of this code too. But
martin> this would mean to change the original upstream source package
martin> which is agains the Debian policy to include the original
martin> sources and patches.

An idea:

Produce the binary packages 'openssl' and 'openssl-nonfree', and have
the source package in the non-free section.  You could point out that
the 'openssl' package has been produced by configuring the openssl
source to avoid some named algorithms

Is that a solution that you guys can work with?  To do that kind of
sectioning in the source tree demands a certain amount of effort and
time.  It may happen in a while, but that won't be a very rapid
process...

-- 
Richard Levitte   \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]