Thanks Upayvira. I'm attaching three files to this e-mail.
export.patch: patch to
infrastructure/site/trunk/xdocs/licenses/exports/index.xml
email.txt: the text of an e-mail you need to send once export.patch is applied
notice.patch: patch to incubator/shindig/trunk/NOTICE
I think you may be the only one who can handle the first two files,
but anyone with shindig commit access can do notice.patch.
After these three files are handled, I think we are done with
http://www.apache.org/dev/crypto.html
Cheers,
Brian
On Fri, Mar 14, 2008 at 11:07 AM, Upayavira <[EMAIL PROTECTED]> wrote:
>
> On Fri, 2008-03-14 at 10:05 -0700, Brian Eaton wrote:
> > On Fri, Mar 14, 2008 at 1:54 AM, Santiago Gala <[EMAIL PROTECTED]> wrote:
> > > If encryption is useful, I'd say that we should follow the export
> > > procedure and have it done early, rather than back off now and have to
> > > fill the forms later. I posted the URI because I have a few days with a
> > > lot of work but I didn't want to let it pass through when I spotted it,
> > > and crypto audit/assessment has been an active item in several apache
> > > lists lately.
> >
> > I've done a bit of research into how we follow this process. To
> > continue we need
> >
> > (a) someone with "site-dev" karma to modify a web page.
>
> Er, me, I think.
>
>
> > (b) the Shindig PMC chair to send an e-mail
>
> We don't have a chair, so any mentor will do. So, er, me.
>
>
> > Can you help me locate those people?
>
> If I recall right, I think I'm sitting right here. Does that help? :-)
>
> I wonder how much of that Santiago can do too.
>
> Upayavira
>
>
>
Index: xdocs/licenses/exports/index.xml
===================================================================
--- xdocs/licenses/exports/index.xml (revision 637154)
+++ xdocs/licenses/exports/index.xml (working copy)
@@ -987,6 +987,21 @@
</Version>
</Product>
</Project>
+ <Project href="http://incubator.apache.org/projects/shindig.html";>
+ <Contact><Name>Upayavira</Name></Contact>
+ <Name>Apache Shindig Project</Name>
+ <Product>
+ <Name>Apache Shindig</Name>
+ <Version>
+ <Names>development</Names>
+ <ECCN>5D002</ECCN>
+ <ControlledSource href="http://svn.apache.org/repos/asf/incubator/shindig/trunk/";>
+ <Manufacturer>ASF</Manufacturer>
+ <Why>designed for use with encryption library</Why>
+ </ControlledSource>
+ </Version>
+ </Product>
+ </Project>
</eccnmatrix>
---EMAIL HEADER---
To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: TSU NOTIFICATION - Encryption
---EMAIL BODY---
SUBMISSION TYPE: TSU
SUBMITTED BY: Upayavira
SUBMITTED FOR: The Apache Software Foundation
POINT OF CONTACT: Secretary, The Apache Software Foundation
FAX: +1-919-573-9199
MANUFACTURER(S): The Apache Software Foundation
PRODUCT NAME/MODEL #: Apache Shindig
ECCN: 5D002
NOTIFICATION: http://www.apache.org/licenses/exports/
----------------
Index: NOTICE
===================================================================
--- NOTICE (revision 637170)
+++ NOTICE (working copy)
@@ -33,3 +33,33 @@
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+-----------------------------------------------------------
+This distribution includes cryptographic software. The country in
+which you currently reside may have restrictions on the import,
+possession, use, and/or re-export to another country, of
+encryption software. BEFORE using any encryption software, please
+check your country's laws, regulations and policies concerning the
+import, possession, or use, and re-export of encryption software, to
+see if this is permitted. See <http://www.wassenaar.org/> for more
+information.
+
+The U.S. Government Department of Commerce, Bureau of Industry and
+Security (BIS), has classified this software as Export Commodity
+Control Number (ECCN) 5D002.C.1, which includes information security
+software using or performing cryptographic functions with asymmetric
+algorithms. The form and manner of this Apache Software Foundation
+distribution makes it eligible for export under the License Exception
+ENC Technology Software Unrestricted (TSU) exception (see the BIS
+Export Administration Regulations, Section 740.13) for both object
+code and source code.
+
+The following provides more details on the included cryptographic
+software:
+
+ Apache Shindig interfaces with the Java JCE APIs to provide digital
+ signing and encryption of messages using the AES, SHA1, and
+ HMAC-SHA1 standards.
+
+ Apache Shindig interfaces with the OAuth library
+ <http://http://code.google.com/p/oauth/> to provide digital signing
+ of messages according to the OAuth standard.
