Mailing-List: contact legal-discuss-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: legal-discuss@apache.org
Received-SPF: pass (athena.apache.org: domain of janwillem.janssen@luminis.eu
 designates 65.55.88.11 as permitted sender)
Received-SPF: pass (mail202-tx2: domain of luminis.eu designates 157.56.252.5
 as permitted sender) client-ip=157.56.252.5;
 envelope-from=janwillem.janssen@luminis.eu;
 helo=DB3PRD0310HT003.eurprd03.prod.outlook.com ;.outlook.com ;
Message-ID: <50236280.8090605@luminis.eu>
Date: Thu, 9 Aug 2012 09:10:56 +0200
From: Jan Willem Janssen <janwillem.janssen@luminis.eu>
Organization: Luminis
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7;
 rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: <legal-discuss@apache.org>
Subject: Re: Regarding the use of cryptographic libraries in Apache projects
References: <50227DC3.1000107@luminis.eu>
 <AC5BE79E-007C-4A85-824D-3AAB519C2BC3@hogstrom.org>
In-Reply-To: <AC5BE79E-007C-4A85-824D-3AAB519C2BC3@hogstrom.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks for the pointers, Matt.

For my understanding: did the Geronimo project only have to mention
the use of the Bouncycastle in the NOTICE file and that's it? Or is
there more to this?

And: does the Geronimo project need to re-consult Legal about these
issues for each and every (future) release, or only once?

Regards,

  Jan Willem

On 8/8/12 7:54 PM, Matt Hogstrom wrote:
> Geronimo had this issue a while back.  Here is a JIRA related to a
> problem with the IDEA algorithm and IP issues:
> https://issues.apache.org/jira/browse/GERONIMO-880
> 
> Here is the notice file in the Apache Geronimo project located in
> trunk
> 
> http://svn.apache.org/repos/asf/geronimo/server/trunk/NOTICE
> 
> On Aug 8, 2012, at 10:54 AM, Jan Willem Janssen
> <janwillem.janssen@luminis.eu> wrote:
> 
> Hi list,
> 
> For the Apache ACE project we're trying to figure out how we
> should deal with the reference to the BouncyCastle cryptographic
> library.
> 
> As far as I can find, [1] classifies all Apache projects for
> export regulations. However, it refers to [2] for the use of
> cryptographic material, which appears to be out of date.
> 
> What is the current procedure to include cryptographic libraries
> such as BouncyCastles in Apache projects?
> 
> 
> [1] http://www.apache.org/licenses/exports/ [2]
> http://www.apache.org/dev/crypto.html
> 
>> 
>> 
>> ---------------------------------------------------------------------
>>
>> 
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
>> For additional commands, e-mail: legal-discuss-help@apache.org
>> 
> 
> 
> ---------------------------------------------------------------------
>
> 
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
> 
> 

- -- 
Met vriendelijke groeten | Kind regards

Jan Willem Janssen | Software Architect
+31 631 765 814

/My world is:/

Luminis Technologies B.V.
IJsselburcht 3
6825 BS  Arnhem
+31 88 586 46 30

http://www.luminis-technologies.com
http://www.luminis.eu

KvK (CoC) 09 16 28 93
BTW (VAT) NL8169.78.566.B.01
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=SjNX
-----END PGP SIGNATURE-----


---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org