From dev-return-100331-archive-asf-public=cust-asf.ponee.io@geronimo.apache.org Wed Sep 4 13:07:36 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 45DF41804BB for ; Wed, 4 Sep 2019 15:07:36 +0200 (CEST) Received: (qmail 96717 invoked by uid 500); 4 Sep 2019 18:09:39 -0000 Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: Reply-To: dev@geronimo.apache.org List-Id: Delivered-To: mailing list dev@geronimo.apache.org Received: (qmail 96707 invoked by uid 99); 4 Sep 2019 18:09:38 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 04 Sep 2019 18:09:38 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id A0AB6C2153 for ; Wed, 4 Sep 2019 13:07:34 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.8 X-Spam-Level: X-Spam-Status: No, score=0.8 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=yahoo.de Received: from mx1-ec2-va.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id Bk11xYILo863 for ; Wed, 4 Sep 2019 13:07:32 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=77.238.176.162; helo=sonic311-30.consmr.mail.ir2.yahoo.com; envelope-from=struberg@yahoo.de; receiver= Received: from sonic311-30.consmr.mail.ir2.yahoo.com (sonic311-30.consmr.mail.ir2.yahoo.com [77.238.176.162]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 29B56BC7A9 for ; Wed, 4 Sep 2019 13:07:31 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.de; s=s2048; t=1567602445; bh=6PJogU74sRZqIssfuZ+lNLX8MMP2a4CKK5F5fXcMWWA=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject; b=Ov9KNPPDGH9ENiS85LNG1flkAFuGt/gjTep1cEBPOW75pYkQynGsO1vGVrtW+wrmhuXh49LAtYnFqAT1REQnFPLB+/oZLhVOInyQNDO1ZfrHsF8Am2HgBsoi6++4jBRpsJuT+42U/ODzTpLZx4SfdRwTsd9+ssLgmr55SgmC68W1h0tq4f93KG0qgCVcZD7u2k/ghjtnKh/Y9qLARhddfzohD7/6WVEEGqGTepmdaZDXCe1ZT2ypzx8Nqg0FlmfLee1e7TkuDZz40oW3ajZ1FpvKQQiSR8Ib36RpcOZBPf9y0qoQCOzUgkbrMi2UcGl6QkUY/MYumSh01zM7KQrCHQ== X-YMail-OSG: 36jX_hkVM1lgaRXhM3.YuaDXnxbW4zh2rtsbX7zcwVK_Y63DYrTO488vyDcPfOQ Lq_fS6tNmSkyqCK7zbVyeQuwFXvIIVgpZOBIPSfZ2dj0O9KdVjkkAYz4sgtFUSrNnlC19fDRoMpI IC6eiQB7qgZoBGiGlCcPiWgiI9k0.SZvdYG9VP3WTsprCI7rt08QP8289JGE9BbpvKsBy57_If7i wWaCk0YW_Ni2M_FkZMjJ1yhIXYFUS8uPbzjSCZ.0yVGu_rYQRhj3tHM3eNOM6F8844ZPf0HhRZWV WzYEeRCH3ETwyUzcPtXSqf6pmWGLxTKXz7xLsOn2IPhQNjuto7QTdBk7nf0WC.SbrSG1cVNxX_j1 YH0NLy8zH4It_6yunfTOG3Xk03O1M_TqtQZ5XXE9heOGcW8M3hWcHx9L8GfJAL6VcT1kZLslIdCJ GnPoDcikwOs4AGRV1xccAAOLyvrluR8Q50jh3GS83gzTBcw1QLSzbcXr_l4lz0HmnyQBpsIdrSWc K4NbJbrotVcQadN9EdVKerKWQiGvX35ducLeQoSlTwlZJgn7P8GrPVTzxXV1np6iOP2finXmaQPN hC8Q_hxvco1mbQW7oLncVFg1DtmzuGPcH7OpgjPVGevcP_uR.VJdaZMO.SR22XL.lURTl392e0Po P53b6VERRckp57mp8wqCkiHzhEgJsvxt5lfeosRMcbcMMowBKkRY6vl1WQDARXkhQjgYM4PROUPF EuQfkaiHkvcOPqA2AdcFlPmAzoSKuujy2DFcnmvqNEjdmjJU6ZYXroUqoV7UNUvRT97Z50bn9KR9 fjjiL088TQhAr.8BB6Nx1R5i8U7TUU058fTmQ0itgia_yYN1uDR18UXlnskE6Kw8cKc0TxL5aWBh PB3P0qzu7Pous1cJ6JQJIatyUyA.44HBTQNwU0NMuu2HliU2ET_w352eKrODOCmt5RBeQUR3.lZF yNngaQ0x9rZuCkm1o1JXJN.sd5xAS31s4OpReHDw6UuqkkVTwP2.c_ocemtdve5CsXyRu6DwQD4E pH96J68VIYncTuWLxRAuA41RBbSWlLaGP6lBwI8SLOZAik6RCHPFCveXYIdXaS6PVHX0br4JMENq c7PQEYnDekGnkM_WSCATZwbcSNFW.TDPWGyH9PSwb67EzSXl4KOhCqyJWkXL9326gEUytsBoi_ff y3qpvH.Touwmma4Pnw2d5b20hfigAJ8teCLq4539FRc4x.zXP_PaM.xGvE5dxJtCODpB70QFhoEL voO1NOrzfrQEcia.2gKPZ70J_Fqsvbo1nX7PM02qsdQ-- Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.ir2.yahoo.com with HTTP; Wed, 4 Sep 2019 13:07:25 +0000 Received: by smtp431.mail.ir2.yahoo.com (Oath Hermes SMTP Server) with ESMTPA ID 7614c6ace2562b515d6de78b0b8d747b; Wed, 04 Sep 2019 13:07:20 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Subject: Re: DISCUSS geronimo-security_1.0_spec content unclear From: Mark Struberg In-Reply-To: Date: Wed, 4 Sep 2019 15:07:18 +0200 Cc: geronimo-dev Content-Transfer-Encoding: quoted-printable Message-Id: References: To: dev@tomee.apache.org X-Mailer: Apple Mail (2.3445.104.11) No, before that it was CDDL+GPL. It just moved to EPL, which is also = CatB LieGrue, strub > Am 04.09.2019 um 15:06 schrieb Romain Manni-Bucau = : >=20 > @Mark: didn't change with jakarta donation? can you open a ticket on > jakartee tracker please? >=20 > Romain Manni-Bucau > @rmannibucau | Blog > | Old Blog > | Github = | > LinkedIn | Book > = >=20 >=20 > Le mer. 4 sept. 2019 =C3=A0 15:04, Mark Struberg a = =C3=A9crit : >=20 >> No, this is an intended situation. >> When one fully passes the TCK then you get the EFSL. This 'removes' = the >> copyleft nature of the EPL. >> The details are quite nested in the legal papers, but that's it = basically. >>=20 >> If we just upgrade our existing API to be binary compat then we have = no IP >> issues. >>=20 >> LieGrue, >> strub >>=20 >>=20 >>> Am 03.09.2019 um 16:37 schrieb Romain Manni-Bucau = >> : >>>=20 >>> MP license is ok (Apache2) but Jakarta is EPLs so keeps the = ambiguity >> for us. >>> That said it is good to reuse the same GAV for end users so we might = ask >> jakarta to double license its api jars? >>>=20 >>> Romain Manni-Bucau >>> @rmannibucau | Blog | Old Blog | Github | LinkedIn | Book >>>=20 >>>=20 >>> Le mar. 3 sept. 2019 =C3=A0 16:33, Jean-Louis Monteiro < >> jlmonteiro@tomitribe.com> a =C3=A9crit : >>> Yep that was the point. >>> So I was asking if we should do the same yes or not. >>>=20 >>> That seems to be your opinion Romain. >>> Mark on the other end is having some doubts about the license. >>> -- >>> Jean-Louis Monteiro >>> http://twitter.com/jlouismonteiro >>> http://www.tomitribe.com >>>=20 >>>=20 >>> On Tue, Sep 3, 2019 at 4:31 PM Romain Manni-Bucau = >> wrote: >>> Le mar. 3 sept. 2019 =C3=A0 16:29, Jean-Louis Monteiro < >> jlmonteiro@tomitribe.com> >>> a =C3=A9crit : >>>=20 >>>> Thanks Romain. I'm fine with using Eclipse jars if from a legal = point >> of >>>> view, it works. >>>> Otherwise, I'd like to split our spec jars. >>>>=20 >>>> What about MicroProfile? >>>>=20 >>>=20 >>> We already agreed to not redo the API and use microprofile jars. >>>=20 >>>=20 >>>> It's the same license and we are using them in our MicroProfile >>>> implementations. >>>> -- >>>> Jean-Louis Monteiro >>>> http://twitter.com/jlouismonteiro >>>> http://www.tomitribe.com >>>>=20 >>>>=20 >>>> On Tue, Sep 3, 2019 at 4:26 PM Mark Struberg = >>=20 >>>> wrote: >>>>=20 >>>>> depends what their license is. EPL is (weak) copyleft. Thus I = would >> like >>>>> to avoid exposing it downstream as api. >>>>>=20 >>>>> LieGrue, >>>>> strub >>>>>=20 >>>>>=20 >>>>>> Am 03.09.2019 um 16:20 schrieb Romain Manni-Bucau < >>>>> rmannibucau@gmail.com>: >>>>>>=20 >>>>>> If we still can't reuse jakata artifacts (their license is ok and >> there >>>>> is >>>>>> no impl reference inside so we should just use them, right?) it >> sounds >>>>>> natural >>>>>>=20 >>>>>> Romain Manni-Bucau >>>>>> @rmannibucau | Blog >>>>>> | Old Blog >>>>>> | Github < >>>>> https://github.com/rmannibucau> | >>>>>> LinkedIn | Book >>>>>> < >>>>>=20 >> = https://www.packtpub.com/application-development/java-ee-8-high-performanc= e >>>>>>=20 >>>>>>=20 >>>>>>=20 >>>>>> Le mar. 3 sept. 2019 =C3=A0 16:18, Jean-Louis Monteiro < >>>>> jlmonteiro@tomitribe.com> >>>>>> a =C3=A9crit : >>>>>>=20 >>>>>>> Hi all, >>>>>>>=20 >>>>>>> I was digging into some other specifications and see what would >> pass >>>>>>> Jakarta TCK and realized that geronimo-security_1.0_spec content >>>>> actually >>>>>>> mixes 2 specifications. >>>>>>>=20 >>>>>>> https://github.com/eclipse-ee4j/security-api >>>>>>>=20 >>>>>>> and >>>>>>>=20 >>>>>>> https://github.com/eclipse-ee4j/jaspic >>>>>>>=20 >>>>>>> I thought the initial intent was to create a specific artifact = per >>>>>>> specification. >>>>>>> Mixing them is a bit annoying from a certification perspective. >>>>>>> It's also not clean because in Tomcat for instance, there is >> already >>>>>>> jaspic API so it becomes a duplicate. >>>>>>>=20 >>>>>>> Would it be possible to split them up in 2 artifacts? >>>>>>>=20 >>>>>>> -- >>>>>>> Jean-Louis Monteiro >>>>>>> http://twitter.com/jlouismonteiro >>>>>>> http://www.tomitribe.com >>>>>>>=20 >>>>>=20 >>>>>=20 >>=20 >>=20