Return-Path: X-Original-To: apmail-activemq-dev-archive@www.apache.org Delivered-To: apmail-activemq-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id F37A010900 for ; Tue, 18 Aug 2015 17:28:55 +0000 (UTC) Received: (qmail 64561 invoked by uid 500); 18 Aug 2015 17:28:55 -0000 Delivered-To: apmail-activemq-dev-archive@activemq.apache.org Received: (qmail 64500 invoked by uid 500); 18 Aug 2015 17:28:55 -0000 Mailing-List: contact dev-help@activemq.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@activemq.apache.org Delivered-To: mailing list dev@activemq.apache.org Received: (qmail 64487 invoked by uid 99); 18 Aug 2015 17:28:55 -0000 Received: from Unknown (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 18 Aug 2015 17:28:55 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id CB0E5DED81 for ; Tue, 18 Aug 2015 17:28:54 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.001 X-Spam-Level: *** X-Spam-Status: No, score=3.001 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-us-east.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id GrNXjp9rUhxB for ; Tue, 18 Aug 2015 17:28:45 +0000 (UTC) Received: from mail-io0-f170.google.com (mail-io0-f170.google.com [209.85.223.170]) by mx1-us-east.apache.org (ASF Mail Server at mx1-us-east.apache.org) with ESMTPS id D5F5E428E7 for ; Tue, 18 Aug 2015 17:28:44 +0000 (UTC) Received: by iodb91 with SMTP id b91so196971921iod.1 for ; Tue, 18 Aug 2015 10:28:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=Jk+4/pyeksnbBD4wf2XAR1sPmJ34jSTpF3TVdZ3wibM=; b=0jXp6RKx79F5+yz87A1nb6qvthlUYZqJBT1cOFplFwghRNJsbTh69ZzlnUv18bpwjw i6N88bwT519b0Vm3MGUenTyUx9XNb4cCTfP1FCLzq1OSpJFD7MN/T/zcsvb00Q+vYC9W 51DIY81oSm91knaH7ZaTY1oqN4HL3aFsX1LWBIVm7Ku7rblMoeemab/S1HGtjQzJoTT9 ip7dGJKak9HSriDaditRdwXo/ixHuTKHUHHIMZMrTZpdxjqFaz3xiDhpcKNE0nk1Dbp3 rcDwRlQidmb6+9MHI2g0MRIv9I+DQZaXcaP1i3zHHyEoeOzusvPxxsYcgzabyL0BcbN7 6AZw== MIME-Version: 1.0 X-Received: by 10.107.135.198 with SMTP id r67mr10031626ioi.43.1439918924470; Tue, 18 Aug 2015 10:28:44 -0700 (PDT) Sender: chirino@gmail.com Received: by 10.107.6.139 with HTTP; Tue, 18 Aug 2015 10:28:44 -0700 (PDT) In-Reply-To: References: <561FB869-BC4D-4D55-9997-D627C1D07C72@apache.org> Date: Tue, 18 Aug 2015 13:28:44 -0400 X-Google-Sender-Auth: wntgBa81HBsGVT-PpXjBJvmOKB8 Message-ID: Subject: Re: [DISCUSS] Jetty 9.2 dependency licensing issues From: Hiram Chirino To: "dev@activemq.apache.org" Content-Type: multipart/alternative; boundary=001a113ecadaffa24c051d993fe5 --001a113ecadaffa24c051d993fe5 Content-Type: text/plain; charset=UTF-8 We prefer ASL when it's available. That's whey we package Germino versions. On Tuesday, August 18, 2015, Christopher Shannon < christopher.l.shannon@gmail.com> wrote: > Dan, > > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we had > to use a geronimo version of it in Artemis. Any idea why? For example, > this seems to apply to the servlet 3.1 spec jar that I listed and the fact > that we had to use a different jar file for jms 2.0 leads me to believe we > can't use the servlet 3.1 jar either. > > > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp > wrote: > > > CDDL is category B and can be used: > > > > http://apache.org/legal/resolved.html#category-b > > > > > > Dan > > > > > > > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon < > > christopher.l.shannon@gmail.com > wrote: > > > > > > Actually, re-reading the Apache guidance I'm not sure that CDDL can be > > > included either if the source is available. So any guidance is > > appreciated > > > from anyone who has dealt with the licensing stuff before. > > > > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon < > > > christopher.l.shannon@gmail.com > wrote: > > > > > >> I'm working on upgrading to Jetty 9.2.x to fix: > > >> https://issues.apache.org/jira/browse/AMQ-5356 > > >> > > >> Part of the upgrade requires updating dependencies for the servlet and > > jsp > > >> jars. Jetty has two different versions of jsp implementations it is > > >> supposed to work. The jetty-jsp works fine but I'm not sure if the > > >> dependencies are compatible with Apache licensing. Supposedly Jetty > > also > > >> works with apache-jsp (which is Tomcat) but I've had lots of issues > > trying > > >> to get it to work right. > > >> > > >> I know we can't use GPL licensed dependencies but I think the > > dependencies > > >> below are both GPL and CDDL. Can we still use the dependencies since > > they > > >> are also under CDDL or is that not allowed? > > >> > > >> > > >> javax.servlet > > >> javax.servlet-api > > >> 3.1 > > >> > > >> > > >> javax.servlet.jsp > > >> javax.servlet.jsp-api > > >> 2.3.1 > > >> > > >> > > >> org.glassfish.web > > >> javax.servlet.jsp > > >> 2.3.2 > > >> > > >> > > >> org.glassfish.web > > >> javax.servlet.jsp.jstl > > >> 1.2.2 > > >> > > >> > > >> > > > > -- > > Daniel Kulp > > dkulp@apache.org - http://dankulp.com/blog > > Talend Community Coder - http://coders.talend.com > > > > > -- Hiram Chirino Engineering | Red Hat, Inc. hchirino@redhat.com | fusesource.com | redhat.com skype: hiramchirino | twitter: @hiramchirino --001a113ecadaffa24c051d993fe5--