Re: [twsocket] A question about OpenSSL DLLs Distribution

2009-03-02 Thread Arno Garrels
jli...@gmail.com wrote:

> Yeah. It looks like it's not allowed to provide downloads from a site
> in the US. http://www.openssl.org/support/faq.html says:
> 
> "When there were tight restrictions on the export of strong encryption
> software from the US only weak encryption algorithms could be freely
> exported (initially 40 bit and then 56 bit)."

I won't rely on those FAQ but try to get the correct information from 
first hand. In Germany, for example, the ministry of economics publish
current export restrictions on their website. I even wrote an e-mail to
them and got a very clear answer.

AFAIK the restrictions in the US have been loosened a couple of years ago.
I still remember those days where Windows, IE and Netscape where available
with weak, 56 bit encryption only outside the US. At least in Europe those
days are history. 

--
Arno Garrels
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] A question about OpenSSL DLLs Distribution

2009-03-01 Thread jlist9
Hello Arno,

Yeah. It looks like it's not allowed to provide downloads from a site
in the US. http://www.openssl.org/support/faq.html says:

"When there were tight restrictions on the export of strong encryption
software from the US only weak encryption algorithms could be freely
exported (initially 40 bit and then 56 bit)."

ICS site has a 7MB installer download link. This site also has the 7MB
installer download: http://www.slproweb.com/products/Win32OpenSSL.html

I haven't found a download site for just the two DLLs, though, which
is actually all I need.

Thanks.

> The export restrictions apply to the country the libraries are available
> for download.

> So everybody should check the export restrictions, they do not only
> apply to OpenSSL, but to all cryptographic stuff as well.


-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] A question about OpenSSL DLLs Distribution

2009-03-01 Thread Arno Garrels
jlist9 wrote:
> Thanks for the reply!
> 
>> Put the files on a server which is located in a country with
>> liberal export restrictions. Make sure that you don't violate
>> possible export restrictions.
> 
> Oh. Does this mean including the two DLLs in my installer
> or zip package is subject to the same export restrictions?

The export restrictions apply to the country the libraries are available
for download.

So everybody should check the export restrictions, they do not only
apply to OpenSSL, but to all cryptographic stuff as well.

--
Arno Garrels
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] A question about OpenSSL DLLs Distribution

2009-03-01 Thread jlist9
Thanks for the reply!

> Put the files on a server which is located in a country with
> liberal export restrictions. Make sure that you don't violate
> possible export restrictions.

Oh. Does this mean including the two DLLs in my installer
or zip package is subject to the same export restrictions?
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


Re: [twsocket] A question about OpenSSL DLLs Distribution

2009-03-01 Thread Arno Garrels
jli...@gmail.com wrote:
> Hello all,
> 
> After reading the openssl site, my understanding is that if I
> want to include the binaries (the two DLLs needed by ICS SSL) I'll
> need to include this license file in the distribution:
> http://www.openssl.org/source/license.html
> 
> Is there anything else I need to do?

I don't think so.

> 
> Is it OK to provide binary downloads of the SSL DLLs (not
> as a part of my software) from my site? Because not all users
> need SSL.

Put the files on a server which is located in a country with 
liberal export restrictions. Make sure that you don't violate
possible export restrictions.  

--
Arno Garrels [TeamICS]
http://www.overbyte.be/eng/overbyte/teamics.html

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be


[twsocket] A question about OpenSSL DLLs Distribution

2009-02-28 Thread jlist9
Hello all,

After reading the openssl site, my understanding is that if I
want to include the binaries (the two DLLs needed by ICS SSL) I'll
need to include this license file in the distribution:
http://www.openssl.org/source/license.html

Is there anything else I need to do?

Is it OK to provide binary downloads of the SSL DLLs (not
as a part of my software) from my site? Because not all users
need SSL.

-- 
Best regards,
Jack

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be