Re: Netatalk and SSL

2006-06-21 Thread Wouter Verhelst
On Wed, Jun 21, 2006 at 01:21:17AM +0200, Hendrik Sattler wrote: Am Mittwoch, 21. Juni 2006 00:56 schrieb Tollef Fog Heen: Is this allowed?  If not, why not?  Would it be allowed if the package stanza for libfoo read: Package: libfoo Depends: libbar-ssl | libbar, libc6 Is this

Re: Netatalk and SSL

2006-06-21 Thread Tollef Fog Heen
* Thomas Bushnell BSG | What matters is not what the Debian package dependencies look like, | but the shared library dependencies in the programs themselves. libfoo will obviously have a NEEDED which lists libbar (and both libbar-ssl and libbar have a soname of libbar and have to conflict). --

Re: Netatalk and SSL

2006-06-21 Thread Tollef Fog Heen
* Hendrik Sattler | Am Mittwoch, 21. Juni 2006 00:56 schrieb Tollef Fog Heen: | Is this allowed?  If not, why not?  Would it be allowed if the package | stanza for libfoo read: | | Package: libfoo | Depends: libbar-ssl | libbar, libc6 | | Is this actually supported by the linker? Imagine

Re: Netatalk and SSL

2006-06-21 Thread Thomas Bushnell BSG
Tollef Fog Heen [EMAIL PROTECTED] writes: * Thomas Bushnell BSG | What matters is not what the Debian package dependencies look like, | but the shared library dependencies in the programs themselves. libfoo will obviously have a NEEDED which lists libbar (and both libbar-ssl and libbar

Re: Netatalk and SSL

2006-06-21 Thread Stephen Gran
This one time, at band camp, Thomas Bushnell BSG said: It is not allowed to ship a binary which includes both GPL'd code and GPL-incompatible code, whether you do so by dynamic or static linking, and whether the GPL'd code directly or only indirectly depends upon the GPL-incompatible code.

Re: Netatalk and SSL

2006-06-20 Thread Marc Haber
On Mon, 19 Jun 2006 15:45:09 +0100, James Westby [EMAIL PROTECTED] wrote: On (19/06/06 16:04), Marc Haber wrote: One other is that GnuTLS seems to fail if used twice inside the same address space, such as receiving messages via SMTP over TLS and doing lookups via ldaps if both exim and libldap

Re: Netatalk and SSL

2006-06-20 Thread Thomas Bushnell BSG
Stephen Gran [EMAIL PROTECTED] writes: Ah, I see the confusion (or maybe have some of my own). I am not talking about a GPL application that has been modified to use libssl. I am talking about a GPL application that uses a library, and that library could or could not link to libssl - the

Re: Netatalk and SSL

2006-06-20 Thread Thomas Bushnell BSG
Jochen Voss [EMAIL PROTECTED] writes: On Mon, Jun 19, 2006 at 11:21:59AM -0700, Thomas Bushnell BSG wrote: You cannot distribute GPL'd source which has been modified to link to a GPL-incompatible library when the only way the source would be useful is if it is, in fact, linked to that

Re: Netatalk and SSL

2006-06-20 Thread Stephen Gran
This one time, at band camp, Thomas Bushnell BSG said: If the GPL'd source is only useful with GPL-incompatible libfoo, then you and the shipper of libfoo are combining to ship a program which contains incompatible licenses, and this is not allowed. If the GPL'd source is useful with various

Re: Netatalk and SSL

2006-06-20 Thread Tollef Fog Heen
* Thomas Bushnell BSG | If the GPL'd source is useful with various equivalent libraries, some | GPL-incompatible, some not, then the shipper of the GPL'd source is | not breaking any rules, because they are not necessarily intending to | combine their code with the incompatible code. | | If you

Re: Netatalk and SSL

2006-06-20 Thread Hendrik Sattler
Am Mittwoch, 21. Juni 2006 00:56 schrieb Tollef Fog Heen: Is this allowed?  If not, why not?  Would it be allowed if the package stanza for libfoo read: Package: libfoo Depends: libbar-ssl | libbar, libc6 Is this actually supported by the linker? If yes, why do we care about transitive

Re: Netatalk and SSL

2006-06-20 Thread Steve Langasek
On Wed, Jun 21, 2006 at 12:56:44AM +0200, Tollef Fog Heen wrote: * Thomas Bushnell BSG | If the GPL'd source is useful with various equivalent libraries, some | GPL-incompatible, some not, then the shipper of the GPL'd source is | not breaking any rules, because they are not necessarily

Re: Netatalk and SSL

2006-06-20 Thread Thomas Bushnell BSG
Stephen Gran [EMAIL PROTECTED] writes: Unfortunately, it still doesn't answer the question I asked about transitive linking, where there is no shared library dependency from the GPL application to a GPL incompatible library. Yes, it does. It is not allowed to ship a binary which includes

Re: Netatalk and SSL

2006-06-20 Thread Thomas Bushnell BSG
Tollef Fog Heen [EMAIL PROTECTED] writes: Package: foo Depends libfoo, libc6 Package: libfoo Depends: libbar | libbar-ssl, libc6 Package: libbar Depends: libc6 Package: libbar-ssl Depends: libc6, libssl (Assume that foo, libfoo and libbar are all licenced under the GPL, libbar with

Re: Netatalk and SSL

2006-06-19 Thread Stephen Gran
This one time, at band camp, Thomas Bushnell BSG said: Anyhow, the point is that certain GPLd programs have special exceptions that allow them to be linked with openssl. However, note that *all* the GPL'd code in the final program must have the exception. For example, gwenhywfar is a

Re: Netatalk and SSL

2006-06-19 Thread Marc Haber
On Sun, 18 Jun 2006 17:27:28 +0200, Martijn van Oosterhout [EMAIL PROTECTED] wrote: The other alternative is to port it to another SSL library, like Mozilla NSS or GnuTLS. Most of the time the SSL code is not terribly complicated and the port is fairly straight-forward. otoh, noone seems to care

Re: Netatalk and SSL

2006-06-19 Thread Martijn van Oosterhout
On 6/19/06, Marc Haber [EMAIL PROTECTED] wrote: On Sun, 18 Jun 2006 17:27:28 +0200, Martijn van Oosterhout [EMAIL PROTECTED] wrote: The other alternative is to port it to another SSL library, like Mozilla NSS or GnuTLS. Most of the time the SSL code is not terribly complicated and the port is

Re: Netatalk and SSL

2006-06-19 Thread Marc Haber
On Mon, 19 Jun 2006 14:43:11 +0200, Martijn van Oosterhout [EMAIL PROTECTED] wrote: On 6/19/06, Marc Haber [EMAIL PROTECTED] wrote: otoh, noone seems to care much about GnuTLS. GnuTLS is causing much grief with the exim4 packages and there is nobody who is willing to help. Is this the

Re: Netatalk and SSL

2006-06-19 Thread James Westby
On (19/06/06 16:04), Marc Haber wrote: On Mon, 19 Jun 2006 14:43:11 +0200, Martijn van Oosterhout [EMAIL PROTECTED] wrote: Is this the /dev/random issue? The /dev/random issue is one of the issues, yes. http://lists.gnupg.org/pipermail/gnutls-dev/2006-January/001046.html and many more

Re: Netatalk and SSL

2006-06-19 Thread Martijn van Oosterhout
The /dev/random issue is one of the issues, yes. One other is that GnuTLS seems to fail if used twice inside the same address space, such as receiving messages via SMTP over TLS and doing lookups via ldaps if both exim and libldap are linked against the same gnutls libs. Odd. The gnutls library

Re: Netatalk and SSL

2006-06-19 Thread Michael Biebl
Martijn van Oosterhout schrieb: The /dev/random issue is one of the issues, yes. One other is that GnuTLS seems to fail if used twice inside the same address space, such as receiving messages via SMTP over TLS and doing lookups via ldaps if both exim and libldap are linked against the same

Re: Netatalk and SSL

2006-06-19 Thread Thomas Bushnell BSG
Stephen Gran [EMAIL PROTECTED] writes: This one time, at band camp, Thomas Bushnell BSG said: Anyhow, the point is that certain GPLd programs have special exceptions that allow them to be linked with openssl. However, note that *all* the GPL'd code in the final program must have the

Re: Netatalk and SSL

2006-06-19 Thread Stephen Gran
This one time, at band camp, Thomas Bushnell BSG said: Stephen Gran [EMAIL PROTECTED] writes: This one time, at band camp, Thomas Bushnell BSG said: Anyhow, the point is that certain GPLd programs have special exceptions that allow them to be linked with openssl. However, note that

Re: Netatalk and SSL

2006-06-19 Thread Thomas Bushnell BSG
Stephen Gran [EMAIL PROTECTED] writes: Can you provide a pointer to the discussion? I am curious to read it, if possible. Of course, if it's just in one of your mbox's, don't worry about it. Just in mbox. The fact that this is transitive linking means that it is perfectly legal to

Re: Netatalk and SSL

2006-06-19 Thread Stephen Gran
This one time, at band camp, Thomas Bushnell BSG said: Stephen Gran [EMAIL PROTECTED] writes: The fact that this is transitive linking means that it is perfectly legal to distribute gnucash *source*. ENOPARSE, sorry. I can't imagine how it _could_ affect the source, since the source

Re: Netatalk and SSL

2006-06-19 Thread Jochen Voss
Hi Thomas, On Mon, Jun 19, 2006 at 11:21:59AM -0700, Thomas Bushnell BSG wrote: You cannot distribute GPL'd source which has been modified to link to a GPL-incompatible library when the only way the source would be useful is if it is, in fact, linked to that library. Just for me to learn

Re: Netatalk and SSL

2006-06-19 Thread Russ Allbery
Stephen Gran [EMAIL PROTECTED] writes: This one time, at band camp, Thomas Bushnell BSG said: Except, they *are* loaded together. Making shim libraries does not change the licensing rules at all, which for the GPL, apply to the complete program. So then how is it that the NVidia drivers

Re: Netatalk and SSL

2006-06-19 Thread Ben Pfaff
Russ Allbery [EMAIL PROTECTED] writes: Stephen Gran [EMAIL PROTECTED] writes: This one time, at band camp, Thomas Bushnell BSG said: Except, they *are* loaded together. Making shim libraries does not change the licensing rules at all, which for the GPL, apply to the complete program. So

Re: Netatalk and SSL

2006-06-19 Thread Russ Allbery
Ben Pfaff [EMAIL PROTECTED] writes: Russ Allbery [EMAIL PROTECTED] writes: Because the Linux kernel adds an additional clause, in the form of a statement of the author's interpretation of the license, saying that such modules are okay. Are you saying that the NVIDIA driver for Linux is a

Re: Netatalk and SSL

2006-06-18 Thread Martijn van Oosterhout
On 6/18/06, Lars Wirzenius [EMAIL PROTECTED] wrote: The OpenSSL license is incompatible with the GPL. A GPL application needs an addition to its license that allows linking with OpenSSL. Some application authors do that and then Debian (or anyone) can distribute the apps (in a binary form); some

Re: Netatalk and SSL

2006-06-18 Thread Thomas Bushnell BSG
Daniel Dickinson [EMAIL PROTECTED] writes: Ok, I'm confused. In the netatalk README.Debian it says that the Debian project has decided that OpenSSL is GPL-incompatible and therefore he can't distribute the ssl-based portions of netatalk (like encrypted authentication with classic macs). I

Re: Netatalk and SSL

2006-06-17 Thread Andrew Donnellan
The license exemption for OpenSSL has to be done by the copyright holder. As Debian holds copyright on hardly any of the software there's not much Debian can do except help persuade upstream to add an exemption. Hope this explains, Andrew On 6/18/06, Daniel Dickinson [EMAIL PROTECTED] wrote:

Re: Netatalk and SSL

2006-06-17 Thread Lars Wirzenius
su, 2006-06-18 kello 01:33 -0400, Daniel Dickinson kirjoitti: Ok, I'm confused. In the netatalk README.Debian it says that the Debian project has decided that OpenSSL is GPL-incompatible and therefore he can't distribute the ssl-based portions of netatalk (like encrypted authentication with