On Mar 14, 2005, at 2:43 PM, Chris Zubrzycki wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mar 14, 2005, at 5:09 PM, David Brown wrote:

On Mon, Mar 14, 2005 at 04:15:21PM -0500, Benjamin Reed wrote:

To me, it would seem kind of arbitrary for openssl 0.9.6 to be allowed,
but 0.9.7 to not be just because we're building our own copy of it.
When Apple releases some future OS release with 0.9.7 on it, is it
magically OK suddenly?

Yes. Section 3 of the GPL:

"However, as a special exception, the source code distributed need not
include anything that is normally distributed (in either source or binary
form) with the major components (compiler, kernel, and so on) of the
operating system on which the executable runs, unless that component
itself accompanies the executable."

And it doesn't really matter what the OpenSSL intent is. They use code
that is already licensed under a license with the advertising clause. The
original authors are not willing to weaken that requirement, so it is, and
probably always will be incompatible with the GPL.

I remember this coming up before somewhere. If the orig. author adds openssl compatibility, there is no problem, as the author may do whatever he wants with his code. The problem would lie in a fork of GPL'd code that added ssl support via openssl.

As fink provides an update of a system library, we should not worry about the issue. We don't overwrite system libs as policy. Since it's already in os x, we're good.

It is a pretty odd update. Fink's openssl package is not available from Apple or endorsed by them. Not only does it not upgrade /usr/lib/libssl or /usr/lib/libcryto, it doesn't touch any of the binaries in /bin and /usr/bin that link against these libraries. In fact, it doesn't touch a single file distributed as part of OS X! The only things that benefit from this "update" are packages included as part of fink, and perhaps some software a user may have compiled on their own. We go out of our way to keep fink separate from the operating system. I an not sure it makes sense to then turn around and claim we are part of the operating system when it suits our purposes.

- -chris zubrzycki
- - --
PGP public key: http://homepage.mac.com/beren/publickey.txt
ID: 0xA2ABC070
Fingerprint: 26B0 BA6B A409 FA83 42B3  1688 FBF9 8232 A2AB C070
========================================================

ICBM Address: 39.795906N -75.056029W


-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (Darwin)

iEYEARECAAYFAkI2E4YACgkQ+/mCMqKrwHDawgCdFHYjVuxJUCh8Jb9hbiRdp1mD
4Y0AnRUQwlCgDfPpVP/pZFTR3ouT+oJr
=VnjN
-----END PGP SIGNATURE-----



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Fink-devel mailing list
Fink-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fink-devel

--
Lars Rosengreen    <[EMAIL PROTECTED]>    http://www.margay.org/~lars

Attachment: smime.p7s
Description: S/MIME cryptographic signature



Reply via email to