Re: Is someone providing Debian packages for cryptlib ?

On 10/20/2011 05:50 PM, Scott Neugroschl wrote:
> On 10/20/2011 7:40 AM, Daniel Kahn Gillmor wrote:
>
>>    https://www.debian-administration.org/users/dkg/weblog/74
>
> Is the Sleepycat license not GPL compatible enough for Debian?  Peter
> says on his
> download page that it's GPL compatible.
> 
> http://www.cs.auckland.ac.nz/~pgut001/cryptlib/download.html

Please read my blog post in more detail.

cryptlib embeds code that is clearly derived from OpenSSL, which has a
license that is explicitly *not* compatible with the GPL.  So while the
code that Peter contributed under the sleepycat license may itself be
GPL-compatible, the modified OpenSSL code it relies on is not
GPL-compatible.  As a result, the combined work is not GPL-compatible,
unless Peter et al have somehow managed to get a new license for the
underlying OpenSSL code.

This is an unfortunate situation for sure, but it's the result of
deliberately incompatible licenses.  You as the end user are free (of
course) to combine these works as you see fit, but any combined work is
itself not redistributable because you have no acceptable license to
distribute it under.  For something to be in debian (and to benefit the
majority of debian users) it needs to be redistributable.

So you could make a cryptlib package for debian, and even include it in
debian if you really advocated for it, but debian wouldn't be able to
include any projects that derived from both CryptLib and from GPLed
work.  We already have a sprawling crypto library with that annoying
limitation in debian: OpenSSL itself.  I don't particularly think we
need another one.

I'd be happy to be wrong about this analysis, of course, because the
situation is unpleasant.  But this is how i understand it at the moment.

Regards,

	--dkg

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=oOqn
-----END PGP SIGNATURE-----