Resent. I hope it reaches the list now.

---------- Forwarded message ----------
From: Eddy Petrișor <[EMAIL PROTECTED]>
Date: 28 Nov 2007 01:13
Subject: possible openssl license violation via curl
To: "Talk about development of Wormux." <wormux-dev@gna.org>


Hello people,

>> Enable wormux to be compiled statically!
>> The configure flag --enable-static works for me now.

>> The curl check is not optimal, but still needed otherwise autotools
produce a bad
>> commandline with invalid ordering.

This line rememberd me that I should point out a license violation of openssl
via the usage of libcurl.

The problem is that curl may have either openssl or gnutls as ssl backends and,
by default wormux forces -lssl when linking which leads to oopenssl code being
included.


The problem is known in curl upstream and in Debian:

http://curl.haxx.se/legal/distro-dilemma.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318590


I have made such that wormux in Debian compiles against libcurl-gnutls to avoid
the issues, but this will appear once 0.8beta3-1 is uploaded.


Possible solutions include:
- force linking against a curl with gnutls backend
- making the right changes in the license to allow the exceptions imposed by the
OpenSSL license: http://www.openssl.org/source/license.html
- drop using curl in favour of something else


Could someone make a bug out of this mail?

--
Regards,
EddyP
=============================================
"Imagination is more important than knowledge" A.Einstein




-- 
Regards,
EddyP
=============================================
"Imagination is more important than knowledge" A.Einstein
_______________________________________________
Wormux-dev mailing list
Wormux-dev@gna.org
https://mail.gna.org/listinfo/wormux-dev

Répondre à