Tollef Fog Heen <[EMAIL PROTECTED]> writes: > Package: inn2 > Severity: serious > Justification: contains non-free files
> it seems like lib/md5.c (in upstream/tarballs/inn-2.4.3.tar.gz in the > inn2 source package) contains RSA licenced code which does not include > the right to distribute derivative works. > See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340538 for a > similar bug and suggestions on alternate locations to get free md5 > implementations. Hi, I'm one of the upstream maintainers of INN. While it could be worded more clearly, I believe this license was clearly intended to allow redistribution of derivative works. ** Copyright (C) 1990, RSA Data Security, Inc. All rights reserved. ** ** License to copy and use this software is granted provided that it is ** identified as the "RSA Data Security, Inc. MD5 Message-Digest Algorithm" ** in all material mentioning or referencing this software or this ** function. ** ** License is also granted to make and use derivative works provided that ** such works are identified as "derived from the RSA Data Security, ** Inc. MD5 Message-Digest Algorithm" in all material mentioning or ** referencing the derived work. ** ** RSA Data Security, Inc. makes no representations concerning either the ** merchantability of this software or the suitability of this software for ** any particular purpose. It is provided "as is" without express or ** implied warranty of any kind. Note the identification requirement for derivative works, which would be meaningless if those works weren't distributed. The license does in general suffer from imprecise definitions of terms. I'm not adverse to switching to L. Peter Deutsch's implementation, but since the MD5 code has been modified to integrate better with INN's build system, this is not a completely trivial task. In the meantime, I don't think this is critical for etch; this code is fairly widely used under the assumption that redistribution of modified versions was intended, and I believe that is strongly implied by the license. -- Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
