On Sat, Jun 14, 2014 at 12:00:27AM +1000, Stuart Prescott wrote: > > but the alternative to this hacky crap is to modify our own license > > to allow linking with OpenSSL. Which honestly is probably not too > > hard since there were only a handful of contributors to > > python_support.py. > > It would be easy to do (yes, I did look at git history to see how many > people have touched it a couple of weeks ago) but I don't think it > really helps. Relicensing would only shift the problem on to anything > that makes use of python-debian -- if we were to accept that hashlib > and GPL'd python-debian were incompatible, then GPL'd stuff would also > not be able to import debian_support for the same reasons.
That is correct. But as python-debian maintainers I think that ensuring that our own code is not affected by this bug should be our primary concern. More precisely, I think we should at this point make sure that all options on the table are viable. If relicensing that specific module under GPL with OpenSSL exception is easy to do --- and apparently we all agree with that --- I think we should do that. That way we are free to choose between multiple technical solutions, no matter if they use Python's hashlib or not. Whether python-debian client code will be *actually* affected by the license issues will depend on the actual technical solution we choose. So, for now, I suggest to both go ahead with the relicensing (I can take care of mailing the people on the list I've already posted, say, a week for now if they don't comment on this thread) *and* investigate if we have alternative technical solutions. Cheers. -- Stefano Zacchiroli . . . . . . . [email protected] . . . . o . . . o . o Maître de conférences . . . . . http://upsilon.cc/zack . . . o . . . o o Former Debian Project Leader . . @zack on identi.ca . . o o o . . . o . « the first rule of tautology club is the first rule of tautology club »
signature.asc
Description: Digital signature
-- http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-python-debian-maint
