Mailing-List: contact legal-discuss-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: legal-discuss@apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 6.0 \(1485\))
Subject: Re: Regarding the use of cryptographic libraries in Apache projects
From: Matt Hogstrom <matt@hogstrom.org>
In-Reply-To: <50227DC3.1000107@luminis.eu>
Date: Wed, 8 Aug 2012 13:54:44 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <AC5BE79E-007C-4A85-824D-3AAB519C2BC3@hogstrom.org>
References: <50227DC3.1000107@luminis.eu>
To: legal-discuss@apache.org

Geronimo had this issue a while back.  Here is a JIRA related to a =
problem with the IDEA algorithm and IP issues:  =
https://issues.apache.org/jira/browse/GERONIMO-880

Here is the notice file in the Apache Geronimo project located in trunk

http://svn.apache.org/repos/asf/geronimo/server/trunk/NOTICE

On Aug 8, 2012, at 10:54 AM, Jan Willem Janssen =
<janwillem.janssen@luminis.eu> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>=20
> Hi list,
>=20
> For the Apache ACE project we're trying to figure out how we should
> deal with the reference to the BouncyCastle cryptographic library.
>=20
> As far as I can find, [1] classifies all Apache projects for export
> regulations. However, it refers to [2] for the use of cryptographic
> material, which appears to be out of date.
>=20
> What is the current procedure to include cryptographic libraries such
> as BouncyCastles in Apache projects?
>=20
>=20
> [1] http://www.apache.org/licenses/exports/
> [2] http://www.apache.org/dev/crypto.html
>=20
> - --=20
> Met vriendelijke groeten | Kind regards
>=20
> Jan Willem Janssen | Software Architect
> +31 631 765 814
>=20
> /My world is:/
>=20
> Luminis Technologies B.V.
> IJsselburcht 3
> 6825 BS  Arnhem
> +31 88 586 46 30
>=20
> http://www.luminis-technologies.com
> http://www.luminis.eu
>=20
> KvK (CoC) 09 16 28 93
> BTW (VAT) NL8169.78.566.B.01
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>=20
> iQIcBAEBAgAGBQJQIn3CAAoJEKF/mP2eHDc4NZUQAJJbCKKOEI5XG7IDktYT+RHG
> 1nOZtSLAiCNsbf7oZ7j/1UxqX8esNt7FoIH4QiXQGddE6JDuSSlaMCiARNfgyZvR
> u3whZARYYdav1FxfJqs4oGb/RL3QT+hMvhCgHPu2a/56WvNxDwbee9ybcpmxp2WI
> L7ku4CxK7lVw7xY0kJDqAqdFy5KwWPnTUaA0xu33z3+uVQgFRhu48x4gXFlnzVaj
> xddjfjlMpSH5agTFLDQDOwlgRFd/vG8tBmMaih0zqgf+FxE/9zYb34csXmXzDuYi
> BSo7PMs52OlLm9eaGMJkBAXEX0pbcShzIBHuVg6XTQ0iORTf4mtV6XGr4bNFS9gk
> i1tO0f1OJH7tHIQr5sc9o7WIftfkb7Fs9BO0nHzLH+i3ZkkGZfFmXPJcOlsmS6R6
> KsKSQvaHEw1NqfwZgRbRfC7EvRwrTrf/O7izD8MEEYGmYpz1rah+yugYdo5/i1nB
> X2gsYo98TlZYnxV7UCRiApkHoRiCyoK8IGbCpq3srLCMG63GqE1Y2P4kc5hHAfx/
> o3vewpr0ZRDzB2RniFFbLB61Nr394+fyVdOASsWmt4Q1JE0A1oI43sxfTWlzY7ax
> jvZ3yupmazHuZHCfQEdEPaNLCpvoWtWEnhbi6E4ZtnG0Y5Q/COeD/4WnlIIrXz6D
> Au74TLnEDVGEGMpqGPAm
> =3DzpnB
> -----END PGP SIGNATURE-----
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
> For additional commands, e-mail: legal-discuss-help@apache.org
>=20


---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org