Mailing-List: contact general-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: general@incubator.apache.org
From: "Sterling Hughes" <sterling@apache.org>
To: general@incubator.apache.org
Subject: Re: [VOTE] Release Apache Mynewt 1.0.0-b1-incubating-rc1
Date: Mon, 28 Nov 2016 20:33:24 -0800
Message-ID: <D200133D-C977-4296-82DA-5C1D06105FEE@apache.org>
In-Reply-To: <BE63AAFD-2DC2-4144-8FE4-2C94E3F70150@classsoftware.com>
References: <20161127011843.GR3011@pseudoephedrine.nightmare-heaven.no-ip.biz>
 <28EFC72C-0C0E-4DDB-9DC5-7E3B11F9F83E@apache.org>
 <BE63AAFD-2DC2-4144-8FE4-2C94E3F70150@classsoftware.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable
archived-at: Tue, 29 Nov 2016 04:33:35 -0000

Thanks Justin.

I=E2=80=99ll let Chris chime in on the rest of the notices (or just fix t=
hem), =

but I wanted to specifically clarify [5] referenced below.  This license =

is not considered Category X either =E2=80=94 do you know what the status=
 of =

4-clause BSD is?

Its low risk to remove that file, and we can eventually replace it.  I =

just wanted to clarify license status.

Sterling

On 28 Nov 2016, at 19:13, Justin Mclean wrote:

> Hi,
>
> -1 binding due to LICENSE issues (see below) and cryptography issues =

> (tinycrypt and polarssl) and there=E2=80=99s a license incompatible wit=
h =

> Apache license 2.0 in the release. [5] (4 clause BSD)
>
> It looks like tinycrypt and polarssl has been added  since last =

> release but not listed here(?) [2]
>
> I checked:
> - artefacts include incubating
> - signatures and hashes good
> - NOTICE is good
> - LICENSE is missing quite a few items (see below)
> - DISCLAIMER exists
> - All source files have headers
> - No unexpected binary files in release
>
> The LICENSE files for core and newt are identical to last release but =

> several 3rd party items have been added
>
> For core:
> - BSD licensed  tiny crypt  copyright (c) 2015, Intel Corporation [3]
> - BSD license PPP copyright (c) 1994-2002 Paul Mackerras [4]+
> - BSD license CHAP/MD5 copyright (c) 1994-2002 Paul Mackerras [4]+
> - BSD license CHAP copyright (c) 1995 Eric Rosenquist. [4]
> - PD license EAP for PP  2001 by Sun Microsystems, Inc. [4]
> - BSD license PPP Encryption copyright (c) 2002 Google, Inc.[4]
> - BSD license EUI64 copyright (c) 1999 Tommi Komulainen[4]+
> - BSD license assorted files copyright (c) 1984-2000 Carnegie Mellon =

> University. [4]+
> - MIT licensed PPP copyright (c) 2003 by Marc Boucher and Copyright =

> (c) 1997 Global Election Systems Inc. [4]+
> - BSD licensed files copyright 2016 STMicroelectronics [6]
> - BSD licensed code based on XySSL copyright (C) 2006-2008  Christophe =

> Devine [7]
> - BSD licensed polarssl  copyright (C) 2009  Paul Bakker [7]
> - BSD license SNMP copyright (c) 2001, 2002 Leon Woestenberg and =

> copyright (c) 2001, 2002 Axon Digital Design B.V. [8] (and other =

> files)
> - BSD licensed lwIP TCP/IP stack copyright (c) 2001, 2002 Swedish =

> Institute of Computer Science. [9]
> - BSD licensed IGMP copyright (c) 2002 CITEL Technologies Ltd. [10]
> - BSD license AutoIP copyright (c) 2007 Dominik Spies [11]
> - BSD license files copyright (c) 2013 - 2015, Freescale =

> Semiconductor, Inc. [12]
> - BSD licensed coap copyright 2016 Intel Corporation and 2013, =

> Institute for Pervasive Computing, ETH Zurich [13]
> - and about a dozen others (including ARM and Nordic Semiconductor) as =

> I gave up at this point
>
> Note the lines marked + have an additional clause (required notice) =

> that effects the NOTICE file (I think).
>
> For newt:
> - PD licensed code copyright (c) 2012 Miki Tebeka [14]
> - 20 or so MIT(?) licensed files [15] copyright Ugorji Nwoke [15]
> - MIT licensed go coap copyright (c) 2013 Dustin Sallings [16]
> - BSD licensed gatt  copyright (c) 2014 PayPal Inc [17]
> - MIT licensed xpc [18]
> - MIT licensed gioctl copyright (c) 2014 Mark Wolfe [19]
>
> This file [5] is licensed under a 4 clause BSD license which is not on =

> the list of approved licenses.
>
> Also looks like you download page need updating to provide links to =

> download the voted on artefacts for the last release. [1]
>
> Thanks,
> Justin
>
> 1. https://mynewt.apache.org/download/
> 2. https://www.apache.org/licenses/exports/
> 3. ./apache-mynewt-core-1.0.0-b1-incubating/crypto/tinycrypt/*
> 4. =

> ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/netif/ppp=
/*
> 5. =

> ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/netif/ppp=
/pppoe.c
> 6. =

> ./apache-mynewt-core-1.0.0-b1-incubating/hw/mcu/stm/stm32f4xx/src/ext/D=
rivers/CMSIS/Device/ST/STM32F4xx/*
> 7. =

> ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/netif/ppp=
/polarssl/*
> 8. =

> ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/include/lwip/=
apps/snmp.h
> 9. ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/
> 10. =

> ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/core/ipv4=
/igmp.c
> 11. =

> ./apache-mynewt-core-1.0.0-b1-incubating/net/ip/lwip_base/src/core/ipv4=
/autoip.c
> 12. =

> ./apache-mynewt-core-1.0.0-b1-incubating/hw/mcu/nxp/src/ext/sdk-2.0-frd=
m-k64f_b160321/devices/MK64F12/*
> 13. =

> ./apache-mynewt-core-1.0.0-b1-incubating/net/oic/src/messaging/coap/*
> 14. =

> ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/Siru=
psen/logrus/alt_exit.go
> 15  =

> ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/ugor=
ji/go/codec/*.go
> 16 =

> ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/dust=
in/go-coap/LICENSE
> 17 =

> ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/runt=
imeinc/gatt/*
> 18 =

> ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/runt=
imeinc/gatt/xpc/*
> 19. =

> ./apache-mynewt-newt-1.0.0-b1-incubating/newtmgr/vendor/github.com/runt=
imeinc/gatt/linux/gioctl/*
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
> For additional commands, e-mail: general-help@incubator.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org