Recently, I realized that there is a page for the export control of ASF products at https://www.apache.org/licenses/exports/. Here is a product classification matrix at https://www.apache.org/licenses/exports/#matrix. In the matrix, there are products (e.g. Apache Geode) that link and use openSSL. The README describes the ECCN at https://github.com/apache/geode/blob/develop/README.md#export-control.
Apache Arrow also uses OpenSSL at least. But I cannot find documents regarding the ECCN in the Arrow repository. Does Apache Arrow need no ECCN? Or does Apache Arrow have to get the ECCN and describe it in the document? Best Regards, Kazuaki Ishizaki