Re: [Fink-devel] the gpl and openssl
On Mar 14, 2005, at 2:43 PM, Chris Zubrzycki wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mar 14, 2005, at 5:09 PM, David Brown wrote: On Mon, Mar 14, 2005 at 04:15:21PM -0500, Benjamin Reed wrote: To me, it would seem kind of arbitrary for openssl 0.9.6 to be allowed, but 0.9.7 to not be just because we're building our own copy of it. When Apple releases some future OS release with 0.9.7 on it, is it magically OK suddenly? Yes. Section 3 of the GPL: However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. And it doesn't really matter what the OpenSSL intent is. They use code that is already licensed under a license with the advertising clause. The original authors are not willing to weaken that requirement, so it is, and probably always will be incompatible with the GPL. I remember this coming up before somewhere. If the orig. author adds openssl compatibility, there is no problem, as the author may do whatever he wants with his code. The problem would lie in a fork of GPL'd code that added ssl support via openssl. As fink provides an update of a system library, we should not worry about the issue. We don't overwrite system libs as policy. Since it's already in os x, we're good. It is a pretty odd update. Fink's openssl package is not available from Apple or endorsed by them. Not only does it not upgrade /usr/lib/libssl or /usr/lib/libcryto, it doesn't touch any of the binaries in /bin and /usr/bin that link against these libraries. In fact, it doesn't touch a single file distributed as part of OS X! The only things that benefit from this update are packages included as part of fink, and perhaps some software a user may have compiled on their own. We go out of our way to keep fink separate from the operating system. I an not sure it makes sense to then turn around and claim we are part of the operating system when it suits our purposes. - -chris zubrzycki - - -- PGP public key: http://homepage.mac.com/beren/publickey.txt ID: 0xA2ABC070 Fingerprint: 26B0 BA6B A409 FA83 42B3 1688 FBF9 8232 A2AB C070 ICBM Address: 39.795906N -75.056029W -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.0 (Darwin) iEYEARECAAYFAkI2E4YACgkQ+/mCMqKrwHDawgCdFHYjVuxJUCh8Jb9hbiRdp1mD 4Y0AnRUQwlCgDfPpVP/pZFTR3ouT+oJr =VnjN -END PGP SIGNATURE- --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595alloc_id=14396op=click ___ Fink-devel mailing list Fink-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fink-devel -- Lars Rosengreen[EMAIL PROTECTED]http://www.margay.org/~lars smime.p7s Description: S/MIME cryptographic signature
Re: [Fink-devel] the gpl and openssl
Hi, Sorry to jump in to this topic a bit late (I'm a loyal list-lurker). About a year ago, I got annoyed by the fact that netatalk (a tool to provide AFP support) was not compiled with OpenSSL in the Debian distribution, meaning that passwords were not encrypted. I engaged in a lenghty discussion on the debian-legal mailing list, and also asked the authors of the package about their opinion. Some things I recall about that discussion: - You, as a person may link a GNU licensed application against OpenSSL (or visa versa, compile a non-GNU compatible app against a GNU library). - However, you may not distribute the resulting binary, since that would be coverd by a single licence according to the FSF, and doing so would violate either the GPL or the OpenSSL licence. - This also applies to dynamic linking, even though the resulting binary does not contain any bit of OpenSSL produced code (!). - This previous statement is a controversial, and not everyone agrees with it. However, so far no-one is willing to go into legal battle over this with the FSF since if they loose, that would mean commercial application can easily incorporate GPL libraries, something the FSF sees as damaging to the open source community. - OpenSSL is not considered 'part of the system libraries', and thus does not fall under that excemption in the GPL. - The exception mentioned (like the one valknut-ssl has) is a good solution. - However, such an exception to the GPL is very, very hard to later add. For example, the netatalk authors were most willing to add it, but felt they could not: they used sources from other GPL-based packages, and did not know anymore who contributed to that. Officialy, they would have to ask each and every contributer to agree with the change in licencing (adding the excempt). This is not practical. - The FSF GPL seems to argue (in their GPL FAQ) that if a (GPL licenced) application has specific code to interface with a non-GPL package, then you may assume that such an exception is implied by the authors of the code. I would then logically conclude, that would imply those authors were at fault by just distributing that specific code interfacing with OpenSSL. However, I am not a lawyer, but had the impression that the legal people did not agree with my logic here. So I gave up. - You can try to compile a package against GnuTLS instead of OpenSSL if you distribute it as a binary. (Note: GnuTLS is a package to mimick OpenSSL, but only under a different, GPL, licence. sarcasmSo much for the argument that Open Source prevents people from writing the same code twice/sarcasm). - There is no problem if you distribute OpenSSL and a GNU-licenced application as source, and let the user compile it. Kind regards, Freek Dijkstra --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595alloc_id=14396op=click ___ Fink-devel mailing list Fink-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fink-devel
[Fink-devel] will be built/installed
Howdy, I've upgraded my home computer to 10.3.8 this past weekend and have been upgrading my fink (unstable) stuff since then. I'm curious about something here that may be the way it is supposed to be, but I don't understand it. Why would a package to be built not be listed as a package to be built? This seems to be the case with gcc4 below. Now, to be clear, I'm not asking why gcc4 needs to be installed, I'm asking why it isn't listed as going to be installed. Thanks for the insight, Robert The following 3 packages will be built: gfortran php5-apache2-ssl postfix-tls The following 36 additional packages will be installed: apache2-ssl apache2-ssl-common apache2-ssl-dev apache2-ssl-mpm-prefork apr-ssl apr-ssl-common apr-ssl-shlibs cyrus-sasl2-dev cyrus-sasl2-shlibs gd2 gd2-shlibs libpng3 libpng3-shlibs mnogosearch-dev mnogosearch1-shlibs net-snmp-ssl net-snmp-ssl-dev net-snmp-ssl-shlibs openldap-ssl openldap-ssl-dev openldap-ssl-shlibs openssl097 openssl097-dev qt3 qt3-designer qt3-doc qt3-linguist qt3-shlibs readline5 sqlite-dev sqlite-shlibs t1lib5 t1lib5-shlibs unixodbc2 unixodbc2-shlibs uw-imap-c-client-ssl Do you want to continue? [Y/n] dpkg-deb -b /sw/src/root-fink-buildlock-gcc4-20050130-5 /sw/src dpkg-deb: building package `fink-buildlock-gcc4-20050130-5' in `/sw/src/fink-buildlock-gcc4-20050130-5_2005.03.15-18.09.53_darwin-powerpc.deb'. Setting build lock... dpkg -i /sw/src/fink-buildlock-gcc4-20050130-5_2005.03.15-18.09.53_darwin-powerpc.deb Selecting previously deselected package fink-buildlock-gcc4-20050130-5. (Reading database ... 53116 files and directories currently installed.) * To produce the above, I issued the following command (actually I reissued it; it had already failed once or twice): nice fink build postgresql74-ssl python24 postfix-tls php5-apache2-ssl gfortran extutils-f77 * Here are my operating system and gcc versions: ProductName:Mac OS X ProductVersion: 10.3.8 BuildVersion: 7U16 gcc (GCC) 3.3 20030304 (Apple Computer, Inc. build 1671) * My fink version: Package manager version: 0.24.1 Distribution version: 0.7.1.rsync * My machine is a: Power Macintosh --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595alloc_id=14396op=click ___ Fink-devel mailing list Fink-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fink-devel
[Fink-devel] Re: experimental/rangerrick/common/main/finkinfo/graphics mjpegtools.info,NONE,1.1 mjpegtools.patch,NONE,1.1
talk about regretting giving up a pkg :D --- TS http://southofheaven.org Chaos is the beginning and end, try dealing with the rest. On 15-Mar-05, at 7:34 PM, Benjamin Reed wrote: Update of /cvsroot/fink/experimental/rangerrick/common/main/finkinfo/graphics In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv5169 Added Files: mjpegtools.info mjpegtools.patch Log Message: mjpegtools 1.6.2, waiting for maintainer approval --- NEW FILE: mjpegtools.patch --- diff -uNr mjpegtools-1.6.2/lavtools/Makefile.in mjpegtools-1.6.2-patched/lavtools/Makefile.in --- mjpegtools-1.6.2/lavtools/Makefile.in Tue Feb 3 17:58:30 2004 +++ mjpegtools-1.6.2-patched/lavtools/Makefile.in Tue Mar 15 16:51:44 2005 @@ -236,7 +236,6 @@ LAV_ALL_LIB_OPTS = \ -version-info $(LT_CURRENT):$(LT_REVISION):$(LT_AGE) \ - -release $(LT_RELEASE) \ -export-dynamic --- NEW FILE: mjpegtools.info --- Package: mjpegtools Version: 1.6.2 Revision: 1 ### Depends: %N2-shlibs, x11, libdv4-shlibs, glib-shlibs, gtk+-shlibs, libjpeg-shlibs, libpng3-shlibs, libquicktime0-shlibs, sdl-shlibs BuildDepends: libiconv-dev, gettext-dev, libdv4, glib, gtk+, libjpeg, libpng3, libquicktime0, libmovtar, sdl, x11-dev ### Source: mirror:sourceforge:mjpeg/%n-%v.tar.gz Source-MD5: 01c0120b0182de67f182ef99ad855daa ### GCC: 3.3 ### Patch: %n.patch PatchScript: ### Fix relink perl -pi.bak -e 's,need_relink=yes,need_relink=no,g' ltmain.sh ### Fix fink libs last perl -pi.bak -e 's,hardcode_direct=yes,hardcode_direct=no,g' configure ### Fixes for getopt on 10.2, not needed on 10.3 #NoSetLDFLAGS: true #SetLIBS: -L%p/lib #SetCPPFLAGS: -I%p/include/gnugetopt -D__GNU_LIBRARY__ ### DocFiles: AUTHORS BUGS CHANGES COPYING ChangeLog HINTS INSTALL NEWS PLANS INSTALL README* TODO ### ConfigureParams: --enable-cmov-extension --disable-xfree-ext --enable-simd-accel --with-glib-prefix=%p --with-gtk-prefix=%p --with-movtar-prefix=%p --with-sdl-prefix=%p --with-quicktime=%p --with-dv=%p --with-dv-yv12=%p --without-aviplay --without-jpeg-mmx --with-x --enable-shared --enable-static --mandir=%i/share/man --infodir=%p/share/info --libexecdir=%p/lib ### SplitOff: Package: %N2-dev BuildDependsOnly: True Depends: %N2-shlibs Replaces: %N-dev Files: bin/mjpegtools-config include lib/liblavfile.a lib/liblavfile.la lib/liblavfile.dylib lib/liblavjpeg.a lib/liblavjpeg.la lib/liblavjpeg.dylib lib/liblavplay.a lib/liblavplay.la lib/liblavplay.dylib lib/libmjpegutils.a lib/pkgconfig DocFiles: AUTHORS BUGS CHANGES COPYING ChangeLog HINTS INSTALL NEWS PLANS INSTALL README* TODO Description: Development files for MJPEG/MPEG capture/editing/compression SplitOff2: Package: %N2-shlibs Replaces: %n Depends: libpng3-shlibs, libjpeg-shlibs, libdv4-shlibs, glib-shlibs Files: lib/liblavfile.*.dylib lib/liblavjpeg.*.dylib lib/liblavplay.*.dylib lib/libmpeg2encpp-1.6.*.dylib lib/libmplex2-1.6.*.dylib Shlibs: %p/lib/liblavfile.0.dylib 2.0.0 %n (= 1.6.1-1) %p/lib/liblavjpeg.0.dylib 2.0.0 %n (= 1.6.1-1) %p/lib/liblavplay.0.dylib 2.0.0 %n (= 1.6.1-1) %p/lib/libmpeg2encpp-1.6.0.dylib 3.0.0 %n (= 1.6.2-1) %p/lib/libmplex2-1.6.0.dylib 3.0.0 %n (= 1.6.2-1) DocFiles: AUTHORS BUGS CHANGES COPYING ChangeLog HINTS INSTALL NEWS PLANS INSTALL README* TODO Description: Libraries for MJPEG/MPEG capture/editing/compression ### Description: Tools for MJPEG/MPEG capture/editing/compression DescDetail: Mjpeg tools is a suite of programs which support video capture, basic editing, playback, and compression to MPEG-1/2 of MJPEG video. The capture software allows MJPEG video streams in AVI, Quicktime, and movtar format to be produced using the Iomega Buz, Miro DC10+, Matrox Marvel, and similar hardware. The editing and playback tools are hardware independent, with support for hardware accelerated playback if present. The MPEG compression tools are based on MPEG Software Simulation Group's reference encoder with enhancements to provide far faster compression and significant quality improvements. ### License: GPL Maintainer: James Watson [EMAIL PROTECTED] Homepage: http://mjpeg.sourceforge.net/ --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595alloc_id=14396op=click ___ Fink-commits mailing list Fink-commits@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fink-commits --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now.
Re: [Fink-devel] Re: experimental/rangerrick/common/main/finkinfo/graphics mjpegtools.info,NONE,1.1 mjpegtools.patch,NONE,1.1
thought I should expand this...cause I would make the change :P --- TS http://southofheaven.org Chaos is the beginning and end, try dealing with the rest. On 15-Mar-05, at 7:47 PM, TheSin wrote: talk about regretting giving up a pkg :D --- TS http://southofheaven.org Chaos is the beginning and end, try dealing with the rest. On 15-Mar-05, at 7:34 PM, Benjamin Reed wrote: Update of /cvsroot/fink/experimental/rangerrick/common/main/finkinfo/graphics In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv5169 Added Files: mjpegtools.info mjpegtools.patch Log Message: mjpegtools 1.6.2, waiting for maintainer approval --- NEW FILE: mjpegtools.patch --- diff -uNr mjpegtools-1.6.2/lavtools/Makefile.in mjpegtools-1.6.2-patched/lavtools/Makefile.in --- mjpegtools-1.6.2/lavtools/Makefile.in Tue Feb 3 17:58:30 2004 +++ mjpegtools-1.6.2-patched/lavtools/Makefile.in Tue Mar 15 16:51:44 2005 @@ -236,7 +236,6 @@ LAV_ALL_LIB_OPTS = \ -version-info $(LT_CURRENT):$(LT_REVISION):$(LT_AGE) \ - -release $(LT_RELEASE) \ -export-dynamic --- NEW FILE: mjpegtools.info --- Package: mjpegtools Version: 1.6.2 Revision: 1 ### Depends: %N2-shlibs, x11, libdv4-shlibs, glib-shlibs, gtk+-shlibs, libjpeg-shlibs, libpng3-shlibs, libquicktime0-shlibs, sdl-shlibs BuildDepends: libiconv-dev, gettext-dev, libdv4, glib, gtk+, libjpeg, libpng3, libquicktime0, libmovtar, sdl, x11-dev ### Source: mirror:sourceforge:mjpeg/%n-%v.tar.gz Source-MD5: 01c0120b0182de67f182ef99ad855daa ### GCC: 3.3 ### Patch: %n.patch PatchScript: ### Fix relink perl -pi.bak -e 's,need_relink=yes,need_relink=no,g' ltmain.sh ### Fix fink libs last perl -pi.bak -e 's,hardcode_direct=yes,hardcode_direct=no,g' configure ### Fixes for getopt on 10.2, not needed on 10.3 #NoSetLDFLAGS: true #SetLIBS: -L%p/lib #SetCPPFLAGS: -I%p/include/gnugetopt -D__GNU_LIBRARY__ ### DocFiles: AUTHORS BUGS CHANGES COPYING ChangeLog HINTS INSTALL NEWS PLANS INSTALL README* TODO ### ConfigureParams: --enable-cmov-extension --disable-xfree-ext --enable-simd-accel --with-glib-prefix=%p --with-gtk-prefix=%p --with-movtar-prefix=%p --with-sdl-prefix=%p --with-quicktime=%p --with-dv=%p --with-dv-yv12=%p --without-aviplay --without-jpeg-mmx --with-x --enable-shared --enable-static --mandir=%i/share/man --infodir=%p/share/info --libexecdir=%p/lib ### SplitOff: Package: %N2-dev BuildDependsOnly: True Depends: %N2-shlibs Replaces: %N-dev Files: bin/mjpegtools-config include lib/liblavfile.a lib/liblavfile.la lib/liblavfile.dylib lib/liblavjpeg.a lib/liblavjpeg.la lib/liblavjpeg.dylib lib/liblavplay.a lib/liblavplay.la lib/liblavplay.dylib lib/libmjpegutils.a lib/pkgconfig DocFiles: AUTHORS BUGS CHANGES COPYING ChangeLog HINTS INSTALL NEWS PLANS INSTALL README* TODO Description: Development files for MJPEG/MPEG capture/editing/compression SplitOff2: Package: %N2-shlibs Replaces: %n Depends: libpng3-shlibs, libjpeg-shlibs, libdv4-shlibs, glib-shlibs Files: lib/liblavfile.*.dylib lib/liblavjpeg.*.dylib lib/liblavplay.*.dylib lib/libmpeg2encpp-1.6.*.dylib lib/libmplex2-1.6.*.dylib Shlibs: %p/lib/liblavfile.0.dylib 2.0.0 %n (= 1.6.1-1) %p/lib/liblavjpeg.0.dylib 2.0.0 %n (= 1.6.1-1) %p/lib/liblavplay.0.dylib 2.0.0 %n (= 1.6.1-1) %p/lib/libmpeg2encpp-1.6.0.dylib 3.0.0 %n (= 1.6.2-1) %p/lib/libmplex2-1.6.0.dylib 3.0.0 %n (= 1.6.2-1) DocFiles: AUTHORS BUGS CHANGES COPYING ChangeLog HINTS INSTALL NEWS PLANS INSTALL README* TODO Description: Libraries for MJPEG/MPEG capture/editing/compression ### Description: Tools for MJPEG/MPEG capture/editing/compression DescDetail: Mjpeg tools is a suite of programs which support video capture, basic editing, playback, and compression to MPEG-1/2 of MJPEG video. The capture software allows MJPEG video streams in AVI, Quicktime, and movtar format to be produced using the Iomega Buz, Miro DC10+, Matrox Marvel, and similar hardware. The editing and playback tools are hardware independent, with support for hardware accelerated playback if present. The MPEG compression tools are based on MPEG Software Simulation Group's reference encoder with enhancements to provide far faster compression and significant quality improvements. ### License: GPL Maintainer: James Watson [EMAIL PROTECTED] Homepage: http://mjpeg.sourceforge.net/ --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595alloc_id=14396op=click ___ Fink-commits mailing list Fink-commits@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fink-commits --- SF email is sponsored
Re: [Fink-devel] will be built/installed
Robert T Wyatt wrote: [] The following 3 packages will be built: gfortran php5-apache2-ssl postfix-tls gfortran is a splitoff of gcc4. Thus gcc4 will be built, but not installed. What makes this a bit confusing is that there exists also a standalone gfortran package description, but it is an older version. -- Martin --- SF email is sponsored by - The IT Product Guide Read honest candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595alloc_id=14396op=click ___ Fink-devel mailing list Fink-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fink-devel
