www-legal-discuss mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From William A Rowe Jr <wr...@rowe-clan.net>
Subject Re: Dependency on OpenSSL
Date Fri, 03 Jun 2016 22:14:08 GMT
All Advertising clauses are odious... that's why the OSS development world
went from copying them word for word to building new licensed that forgo
such a stupid requirement.

Unlike copy left, for example, the combined work is still able to be
applied in any scenario the developer wishes, which is the ASF's definition
of freedom. We never suggested the user has the freedom from observing all
applicable license terms, our own included. So this is obviously (to most
of us here) not category X.

You raise good questions but I hope you know the answer to 1) below, if
you've survived this long at this forum.

Question 3) is legitimate (there is no AL 1, but there are AL 1.0 and 1.1
which should both be clarified.)

Question 2) is more complex and well worth raising.  Where the ASF does not
ship a binary of OpenSSL, e.g. SVN project or APR project, it doesn't fall
on us to observe the license terms of something we don't distribute.

Where projects do choose to ship the binaries from ASF projects with
OpenSSL, it is clearly a more complex issue and guidance from ASF Legal
would certainly be appropriate.

On Jun 3, 2016 9:52 AM, "Alex Harui" <aharui@adobe.com> wrote:
> On 6/3/16, 7:08 AM, "Justin Mclean" <justin@classsoftware.com> wrote:
> >Hi,
> >
> >>> FWIW, OpenSSL is a dependency of a number of Apache projects and
> >>> has long been vetted as acceptable by the board, and all of the Legal
> >>>VP's
> >>> throughout our evolution.
> >> Including today’s
> >
> >The point being missed I think is if it bundled or not. Are making an
> >exception for OpenSSL or all Apache 1.0/BSD 4 clause licenses?
> Apologies if this makes Greg's head explode again, but also:
> 1) What are the License and Notice requirements for this exception?
> 2) Does the advertising clause apply to the project web pages and its
> consumers?
> 3) Can treatment of Apache 1.0 go in the FAQ at
> http://www.apache.org/legal/resolved.html?
> I imagine to the folks who have been around a long time that concerns over
> AL1.0 seem unnecessary, but all the newer folks have to go on is what we
> can find on the various web pages.
> Thanks,
> -Alex

View raw message