commons-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stian Soiland-Reyes <>
Subject US Export classification & ECCN registration for encryption in commons?
Date Wed, 04 May 2016 12:35:03 GMT

Sorry for spotting this..

Apache Commons Crypto  is not listed on - does it need to be?  (One
would assume so..)

Also it was raised that Commons VFS depends on Bouncy Castle/Apache
Mina/Jetty/SSHD/Hadoop/jsch and has encryption binding for AES128 -
perhaps that also needs to be listed and registered?

We only have listed:

Commons Compress
Commons OpenPGP

See guidance on

BTW - I've raised to
see if merely using a listed source as a Maven <dependency> means you
also are classified - or if you would need to also bundle the
dependency's binary (which I think we don't do).

Stian Soiland-Reyes
Apache Taverna (incubating), Apache Commons RDF (incubating)

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message