Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-dev@incubator.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: 
 <6005BE083BF501439A84DC3523BAC82DF6C3F47865@LONPMAILBOX01.citrite.net>
References: 
 <CAKprHVas1i0ii0ps+uemqFNgbd8CqPtd-erDOUGy7sM1XG1QZw@mail.gmail.com>
	<6005BE083BF501439A84DC3523BAC82DF6C3F47865@LONPMAILBOX01.citrite.net>
Date: Tue, 4 Sep 2012 10:46:05 -0400
Message-ID: 
 <CA+96GG6q1-Uk4ynL4Ks1TaJjGSJr3r67DsmbqY0Yw0FYDUTJig@mail.gmail.com>
Subject: Re: Consensus around cryptography/export control issues
From: Chip Childers <chip.childers@sungard.com>
To: cloudstack-dev@incubator.apache.org
Cc: Will Chan <will.chan@citrix.com>, Kevin Kluge <Kevin.Kluge@citrix.com>
Content-Type: text/plain; charset=ISO-8859-1

On Sun, Aug 26, 2012 at 12:42 AM, Ewan Mellor <Ewan.Mellor@eu.citrix.com> wrote:
>> -----Original Message-----
>> From: David Nalley [mailto:david@gnsa.us]
>> Sent: 25 August 2012 08:30
>> To: cloudstack-dev@incubator.apache.org
>> Subject: Consensus around cryptography/export control issues
>>
>> Hi folks,
>>
>> I am willing to own the crypto reporting stuff, but..... before I begin, I want to
>> make sure we have a good understanding of what specifically we are
>> declaring.
>>
>> So - my perception/understanding is that:
>>
>> The CloudStack source code release will contain no crypto inherently.
>>
>> The convenience binaries that we produce will have Bouncy Castle - the
>> systemVMs will have openswan, etc, and a build itself depends on libraries
>> like bouncy castle.
>>
>> So first am I missing anything? Is there any actual crypto in the source repo
>> that I am not aware of?
>>
>> The ASF's guidelines on this are here:
>> http://www.apache.org/dev/crypto.html for those of you wanting some
>> light weekend reading.
>
> Citrix should have done all of this for their last few releases.  I suggest you ask Will / Kevin.  You should be able to copy their declaration.
>
> Cheers,
>
> Ewan.
>

David,

We should include ASF, Bouncy Castle and JCraft on the export page.  I
didn't find any others (but might have missed something).

-chip