Licence issues

Andreas Rottmann <[email protected]>
Newsgroups gmane.comp.python.cryptography
Message-ID <[email protected]>
Hi!

I've made a python-crypto Debian package and already have uploaded it
to Debian unstable. Unfortunatly, I was alarmed that parts of the code
are not DFSG (Debian Free Software Guidelines) - Free, meaning an
inclusion of python-crypto (or the non-DFSG-free parts) in the Debian
main distribution would be invalid. The part I was alarmed about was
the RIPEMD implementation:

--RIPEMD.c-----------------
 * Copyright (c) Katholieke Universiteit Leuven 1996, All Rights Reserved
 * The Katholieke Universiteit Leuven makes no representations concerning
 * either the merchantability of this software or the suitability of this
 * software for any particular purpose. It is provided "as is" without
 * express or implied warranty of any kind. These notices must be retained
 * in any copies of any part of this documentation and/or software.
--------------------------

IANAL, but it seems 'All rights reserved' means that all actions
(distribution, modification, ...), unless explicitly stated otherwise
are prohibited. This clearly violates DFSG
(http://www.debian.org/social_contract.html#guidelines).

I would like to have this clarified, since the LICENCE file in the
source states:

<snip>
===================================================================
Distribute and use freely; there are no restrictions on further
dissemination and usage except those imposed by the laws of your
country of residence.  This software is provided "as is" without
warranty of fitness for use or suitability for any purpose, express
or implied. Use at your own risk or not at all.
===================================================================

Incorporating the code into commercial products is permitted; you do
not have to make source available or contribute your changes back
(though that would be nice).
</snip>

Regards, Andy
--
Andreas Rottmann         | Dru@ICQ        | 118634484@ICQ | [email protected]
http://www.8ung.at/rotty | GnuPG Key: http://www.8ung.at/rotty/gpg.asc
Fingerprint              | DFB4 4EB4 78A4 5EEE 6219  F228 F92F CFC5 01FD 5B62
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.