From dev-return-100330-archive-asf-public=cust-asf.ponee.io@geronimo.apache.org Wed Sep 4 13:06:31 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id F215F1804BB for ; Wed, 4 Sep 2019 15:06:30 +0200 (CEST) Received: (qmail 95239 invoked by uid 500); 4 Sep 2019 18:08:25 -0000 Mailing-List: contact dev-help@geronimo.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: Reply-To: dev@geronimo.apache.org List-Id: Delivered-To: mailing list dev@geronimo.apache.org Received: (qmail 95228 invoked by uid 99); 4 Sep 2019 18:08:24 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 04 Sep 2019 18:08:24 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 6B726182AC0 for ; Wed, 4 Sep 2019 13:06:29 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.801 X-Spam-Level: * X-Spam-Status: No, score=1.801 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-ec2-va.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id v0ZVpSmYEDIl for ; Wed, 4 Sep 2019 13:06:27 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.160.172; helo=mail-qt1-f172.google.com; envelope-from=rmannibucau@gmail.com; receiver= Received: from mail-qt1-f172.google.com (mail-qt1-f172.google.com [209.85.160.172]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id 15D3ABC7A9 for ; Wed, 4 Sep 2019 13:06:27 +0000 (UTC) Received: by mail-qt1-f172.google.com with SMTP id j10so6574822qtp.8 for ; Wed, 04 Sep 2019 06:06:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=1gErC6NY/yIyZYzBn2y3a8RiilvJbFcksuawA349qbk=; b=OT7w+gR3o+c6OojVSRNstNCkuIQ1o6nMpuW3K9zpgE2vc8O83lW0Zn7/8p3FUI+NE9 1KGalYBoYVUfJs+KEN6pngKkUwAYkSLSF7YnVKTqekObPk2OCJLFPMCdko/ed14S/fAo rOghRyJcBZ6F6uUT4lasmKDVpvz78muBE5ZYUVHAH9PfIPMF7dq5LfWaplf3cTjf53Nr z2tLwo41GW8Cjg22QObaCMBondArzs/v8lR/ZgH26sZd+17paj+c9Oa8ZkuOle9qIdel sFz0xC4Hkr8GPlmeOeoj0hfrPrxpZDsXcKZ8bKiFcwc7ommqSxe5dyq1xqsplCMj6lL5 RiOw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=1gErC6NY/yIyZYzBn2y3a8RiilvJbFcksuawA349qbk=; b=QGAcmGLKy8Ae4gdRCRQs4jc3eJBLmgdhtQiV6i5+0q4ngwAzykOlAa4t14Jo3aixvL wZQJckuvmqFpxfu6pbVyG03lGtD2Vf8BFkYs9IvzAmMny6bkUrR3i8/D/Wt4f4SAcQzu 51nKlE3rQ8bBA8bhs6dEi/JgIpakuTwVWmsmnGx371JakZBrBMl6QUHtvQyVu+vshJAx YXrkJfvhlqzE5H52NXJb2eVi0FWu63q1FDq6PTpzflUnymLIkDHNTi/7WduTG/eVrXoe UWRn0czuluCvg8qwLtj8UvVjKe+eMnbBeDjVx5hSIeQBdNp1pkwsg0CFlpXJUkVZxuV5 CEhQ== X-Gm-Message-State: APjAAAWAbN1sGtqJpc0/e+XC6NxX98HCWez6huPaWbGOq359ItPUXTvQ thX3jmCyCQjYu80BaL9NOt7kDCueet7WBUxpIsx5RQ== X-Google-Smtp-Source: APXvYqw4qLdPmdoqU1ejLIg0XUPN7ZjrQPNRtGN5rz7W3hYpB7WQCH4FNDgVUTOFMUHiJBJMJNds4B1lOSemGmraoQ4= X-Received: by 2002:a0c:d018:: with SMTP id u24mr12030873qvg.202.1567602386188; Wed, 04 Sep 2019 06:06:26 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Romain Manni-Bucau Date: Wed, 4 Sep 2019 15:06:14 +0200 Message-ID: Subject: Re: DISCUSS geronimo-security_1.0_spec content unclear To: dev@geronimo.apache.org Cc: dev@tomee.apache.org Content-Type: multipart/alternative; boundary="00000000000060c1860591b9dff5" --00000000000060c1860591b9dff5 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable @Mark: didn't change with jakarta donation? can you open a ticket on jakartee tracker please? Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github | LinkedIn | Book Le mer. 4 sept. 2019 =C3=A0 15:04, Mark Struberg a =C3= =A9crit : > No, this is an intended situation. > When one fully passes the TCK then you get the EFSL. This 'removes' the > copyleft nature of the EPL. > The details are quite nested in the legal papers, but that's it basically= . > > If we just upgrade our existing API to be binary compat then we have no I= P > issues. > > LieGrue, > strub > > > > Am 03.09.2019 um 16:37 schrieb Romain Manni-Bucau >: > > > > MP license is ok (Apache2) but Jakarta is EPLs so keeps the ambiguity > for us. > > That said it is good to reuse the same GAV for end users so we might as= k > jakarta to double license its api jars? > > > > Romain Manni-Bucau > > @rmannibucau | Blog | Old Blog | Github | LinkedIn | Book > > > > > > Le mar. 3 sept. 2019 =C3=A0 16:33, Jean-Louis Monteiro < > jlmonteiro@tomitribe.com> a =C3=A9crit : > > Yep that was the point. > > So I was asking if we should do the same yes or not. > > > > That seems to be your opinion Romain. > > Mark on the other end is having some doubts about the license. > > -- > > Jean-Louis Monteiro > > http://twitter.com/jlouismonteiro > > http://www.tomitribe.com > > > > > > On Tue, Sep 3, 2019 at 4:31 PM Romain Manni-Bucau > wrote: > > Le mar. 3 sept. 2019 =C3=A0 16:29, Jean-Louis Monteiro < > jlmonteiro@tomitribe.com> > > a =C3=A9crit : > > > > > Thanks Romain. I'm fine with using Eclipse jars if from a legal point > of > > > view, it works. > > > Otherwise, I'd like to split our spec jars. > > > > > > What about MicroProfile? > > > > > > > We already agreed to not redo the API and use microprofile jars. > > > > > > > It's the same license and we are using them in our MicroProfile > > > implementations. > > > -- > > > Jean-Louis Monteiro > > > http://twitter.com/jlouismonteiro > > > http://www.tomitribe.com > > > > > > > > > On Tue, Sep 3, 2019 at 4:26 PM Mark Struberg > > > > wrote: > > > > > >> depends what their license is. EPL is (weak) copyleft. Thus I would > like > > >> to avoid exposing it downstream as api. > > >> > > >> LieGrue, > > >> strub > > >> > > >> > > >> > Am 03.09.2019 um 16:20 schrieb Romain Manni-Bucau < > > >> rmannibucau@gmail.com>: > > >> > > > >> > If we still can't reuse jakata artifacts (their license is ok and > there > > >> is > > >> > no impl reference inside so we should just use them, right?) it > sounds > > >> > natural > > >> > > > >> > Romain Manni-Bucau > > >> > @rmannibucau | Blog > > >> > | Old Blog > > >> > | Github < > > >> https://github.com/rmannibucau> | > > >> > LinkedIn | Book > > >> > < > > >> > https://www.packtpub.com/application-development/java-ee-8-high-performan= ce > > >> > > > >> > > > >> > > > >> > Le mar. 3 sept. 2019 =C3=A0 16:18, Jean-Louis Monteiro < > > >> jlmonteiro@tomitribe.com> > > >> > a =C3=A9crit : > > >> > > > >> >> Hi all, > > >> >> > > >> >> I was digging into some other specifications and see what would > pass > > >> >> Jakarta TCK and realized that geronimo-security_1.0_spec content > > >> actually > > >> >> mixes 2 specifications. > > >> >> > > >> >> https://github.com/eclipse-ee4j/security-api > > >> >> > > >> >> and > > >> >> > > >> >> https://github.com/eclipse-ee4j/jaspic > > >> >> > > >> >> I thought the initial intent was to create a specific artifact pe= r > > >> >> specification. > > >> >> Mixing them is a bit annoying from a certification perspective. > > >> >> It's also not clean because in Tomcat for instance, there is > already > > >> >> jaspic API so it becomes a duplicate. > > >> >> > > >> >> Would it be possible to split them up in 2 artifacts? > > >> >> > > >> >> -- > > >> >> Jean-Louis Monteiro > > >> >> http://twitter.com/jlouismonteiro > > >> >> http://www.tomitribe.com > > >> >> > > >> > > >> > > --00000000000060c1860591b9dff5 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
@Mark: didn't change with jakarta donation? can you op= en a ticket on jakartee tracker please?
=

Romain Manni-Bucau
@rmannibucau | =C2=A0Blog=C2=A0| Old Blog |=C2=A0Github=C2=A0| LinkedIn=C2=A0| <= a href=3D"https://www.packtpub.com/application-development/java-ee-8-high-p= erformance" target=3D"_blank">Book
<= /div>


Le=C2=A0mer. 4 sept. 2019 =C3=A0=C2=A015:04, Mark Struberg <= struberg@yahoo.de> a =C3=A9crit= =C2=A0:
No, this= is an intended situation.
When one fully passes the TCK then you get the EFSL. This 'removes'= the copyleft nature of the EPL.
The details are quite nested in the legal papers, but that's it basical= ly.

If we just upgrade our existing API to be binary compat then we have no IP = issues.

LieGrue,
strub


> Am 03.09.2019 um 16:37 schrieb Romain Manni-Bucau <rmannibucau@gmail.com>: >
> MP license is ok (Apache2) but Jakarta is EPLs so keeps the ambiguity = for us.
> That said it is good to reuse the same GAV for end users so we might a= sk jakarta to double license its api jars?
>
> Romain Manni-Bucau
> @rmannibucau |=C2=A0 Blog | Old Blog | Github | LinkedIn | Book
>
>
> Le mar. 3 sept. 2019 =C3=A0 16:33, Jean-Louis Monteiro <jlmonteiro@tomitribe.com= > a =C3=A9crit :
> Yep that was the point.
> So I was asking if we should do the same yes or not.
>
> That seems to be your opinion Romain.
> Mark on the other end is having some doubts about the license.
> --
> Jean-Louis Monteiro
> http://twitter.com/jlouismonteiro
> http://www.tomitribe.com
>
>
> On Tue, Sep 3, 2019 at 4:31 PM Romain Manni-Bucau <rmannibucau@gmail.com> wr= ote:
> Le mar. 3 sept. 2019 =C3=A0 16:29, Jean-Louis Monteiro <jlmonteiro@tomitribe.com= >
> a =C3=A9crit :
>
> > Thanks Romain. I'm fine with using Eclipse jars if from a leg= al point of
> > view, it works.
> > Otherwise, I'd like to split our spec jars.
> >
> > What about MicroProfile?
> >
>
> We already agreed to not redo the API and use microprofile jars.
>
>
> > It's the same license and we are using them in our MicroProfi= le
> > implementations.
> > --
> > Jean-Louis Monteiro
> > http://twitter.com/jlouismonteiro
> > http://www.tomitribe.com
> >
> >
> > On Tue, Sep 3, 2019 at 4:26 PM Mark Struberg <struberg@yahoo.d= e.invalid>
> > wrote:
> >
> >> depends what their license is. EPL is (weak) copyleft. Thus I= would like
> >> to avoid exposing it downstream as api.
> >>
> >> LieGrue,
> >> strub
> >>
> >>
> >> > Am 03.09.2019 um 16:20 schrieb Romain Manni-Bucau < > >> rm= annibucau@gmail.com>:
> >> >
> >> > If we still can't reuse jakata artifacts (their lice= nse is ok and there
> >> is
> >> > no impl reference inside so we should just use them, rig= ht?) it sounds
> >> > natural
> >> >
> >> > Romain Manni-Bucau
> >> > @rmannibucau <https://twitter.com/rmannibucau> |=C2=A0 Blog
> >> > <https://rmannibucau.metawerx.net/> | = Old Blog
> >> > <http://rmannibucau.wordpress.com> | Gi= thub <
> >> https://github.com/rmannibucau> |
> >> > LinkedIn <https://www.linkedin.com/in/r= mannibucau> | Book
> >> > <
> >> https://www= .packtpub.com/application-development/java-ee-8-high-performance
> >> >
> >> >
> >> >
> >> > Le mar. 3 sept. 2019 =C3=A0 16:18, Jean-Louis Monteiro &= lt;
> >> jlmonteiro@tomitribe.com>
> >> > a =C3=A9crit :
> >> >
> >> >> Hi all,
> >> >>
> >> >> I was digging into some other specifications and see= what would pass
> >> >> Jakarta TCK and realized that geronimo-security_1.0_= spec content
> >> actually
> >> >> mixes 2 specifications.
> >> >>
> >> >> https://github.com/eclipse-ee4j/s= ecurity-api
> >> >>
> >> >> and
> >> >>
> >> >> https://github.com/eclipse-ee4j/jaspic<= /a>
> >> >>
> >> >> I thought the initial intent was to create a specifi= c artifact per
> >> >> specification.
> >> >> Mixing them is a bit annoying from a certification p= erspective.
> >> >> It's also not clean because in Tomcat for instan= ce, there is already
> >> >> jaspic API so it becomes a duplicate.
> >> >>
> >> >> Would it be possible to split them up in 2 artifacts= ?
> >> >>
> >> >> --
> >> >> Jean-Louis Monteiro
> >> >> http://twitter.com/jlouismonteiro
> >> >> http://www.tomitribe.com
> >> >>
> >>
> >>

--00000000000060c1860591b9dff5--