> -----Original Message----- > From: Mark Thomas [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 14, 2006 12:42 PM > To: Tomcat Users List > Subject: Re: License query for jstl.jar > > IANAL...
Understood; I'm grateful for your comments anyway.. > > Simon Kitching wrote: > > Unfortunately, in order to satisfy both my companies' > lawyers and the > > client's lawyers I think I would need to show that this jar > is indeed > > built from ASL-licensed code. > > This is *not* ASL licenced code. Actually, every file I've looked at in the jakarta taglibs project DOES have the standard ASL2.0 licensing embedded in it, and in addition they all contain an Apache Foundation copyright statement: http://svn.apache.org/repos/asf/tomcat/servletapi/servlet2.4-jsp2.0-tc5.x/js r152/src/share/javax/servlet/jsp/ErrorData.java Of course the license statement is the key to making the code "open source", but the copyright assignment is a bonus. > > > Does anyone have a link to a page from Sun that shows that > they did in > > fact use the Apache code base to create this jar? Neither > the Sun JSTL home page: > > http://java.sun.com/products/jsp/jstl > > The > http://svn.apache.org/repos/asf/tomcat/servletapi/servlet2.4-j > sp2.0-tc5.x/ > codebase is *not* an Apache codebase. Think of it as Apache > providing hosting services for the expert group. By "Apache code base" I simply mean that the code is licensed under the ASL2.0. All the code in the jakarta taglibs standard lib project certainly is, and I'm pretty sure that it is ASF policy that only ASL-licensed files can be stored in apache svn or served from apache download sites. I've been involved with Apache for many years now, and am not aware of any cases to the contrary. The problem I have here is that it isn't clear that the jarfile checked in to tomcat's svn is actually built from the ASL-licensed source in the jakarta taglibs project. If someone could point me at a Sun webpage that says "Click here to download the reference implementation of jstl-1.0.1.jar or visit jakarta.apache.org/taglibs to download the source" then that would be the key. Unfortunately I just can't find any such page. That's my problem of course, but any pointers will be greatly appreciated. > > You might want to try the [EMAIL PROTECTED] list. Yes, I'll do that. I'm personally quite confident there aren't any licensing problems; however I'm not so confident it actually *says* so anywhere... Cheers, Simon --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
