Subject: Re: openssl license change
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
From: Mihai Chelaru <kefren@netbastards.org>
List: tech-security
Date: 09/24/2002 14:24:17
Basically this means that the SUN code cannot be modified and that any user of
this code cannot sue SUN, if I understand it correclty. I don't think that a
text like 'If you use NetBSD you cannot sue SUN' would fit nicely on NetBSD
website. Can we just drop the SUN code ?
M
On Tuesday 24 September 2002 11:53, Jun-ichiro itojun Hagino wrote:
> it looks that openssl will have the following copyright boilerplate
> for the import of elliptic curve code. therefore it won't meet our
> "basesrc" requirement, and i guess it won't even fit into "gnusrc".
> what shall we do about it? no updates for openssl portion?
>
> itojun
>
>
> /* ====================================================================
> * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
> *
> * Portions of the attached software ("Contribution") are developed by
> * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
> *
> * The Contribution is licensed pursuant to the OpenSSL open source
> * license provided above.
> *
> * In addition, Sun covenants to all licensees who provide a reciprocal
> * covenant with respect to their own patents if any, not to sue under
> * current and future patent claims necessarily infringed by the making,
> * using, practicing, selling, offering for sale and/or otherwise
> * disposing of the Contribution as delivered hereunder
> * (or portions thereof), provided that such covenant shall not apply:
> * 1) for code that a licensee deletes from the Contribution;
> * 2) separates from the Contribution; or
> * 3) for infringements caused by:
> * i) the modification of the Contribution or
> * ii) the combination of the Contribution with other software or
> * devices where such combination causes the infringement.
> *
> * The elliptic curve binary polynomial software is originally written by
> * Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems
> Laboratories. *
> */
>
>
> % grep -l 'Sun Micro' `find . -name \*.c -print`
> ./apps/ecparam.c
> ./apps/s_server.c
> ./apps/speed.c
> ./crypto/asn1/t_pkey.c
> ./crypto/bn/bn_gf2m.c
> ./crypto/bn/bntest.c
> ./crypto/cryptlib.c
> ./crypto/ec/ec2_mult.c
> ./crypto/ec/ec2_smpl.c
> ./crypto/ec/ec_curve.c
> ./crypto/ec/ec_cvt.c
> ./crypto/ec/ec_key.c
> ./crypto/ec/ec_lib.c
> ./crypto/ec/ec_mult.c
> ./crypto/ec/ecp_mont.c
> ./crypto/ec/ecp_nist.c
> ./crypto/ec/ecp_recp.c
> ./crypto/ec/ecp_smpl.c
> ./crypto/ec/ectest.c
> ./crypto/ecdh/ecdhtest.c
> ./crypto/ecdh/ech_key.c
> ./crypto/ecdh/ech_lib.c
> ./crypto/ecdh/ech_ossl.c
> ./crypto/ecdsa/ecdsatest.c
> ./crypto/engine/eng_fat.c
> ./crypto/engine/eng_list.c
> ./crypto/engine/eng_openssl.c
> ./crypto/engine/tb_ecdh.c
> ./ssl/s3_both.c
> ./ssl/s3_clnt.c
> ./ssl/s3_lib.c
> ./ssl/s3_srvr.c
> ./ssl/ssl_cert.c
> ./ssl/ssl_ciph.c
> ./ssl/ssl_lib.c
> ./ssl/ssltest.c