Subject: Re: openssl license change
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
From: Mihai Chelaru <kefren@netbastards.org>
List: tech-security
Date: 09/24/2002 14:24:17
Basically this means that the SUN code cannot be modified and that any user of 
this code cannot sue SUN, if I understand it correclty. I don't think that a 
text like 'If you use NetBSD you cannot sue SUN' would fit nicely on NetBSD 
website. Can we just drop the SUN code ?

M

On Tuesday 24 September 2002 11:53, Jun-ichiro itojun Hagino wrote:
> it looks that openssl will have the following copyright boilerplate
> 	for the import of elliptic curve code.  therefore it won't meet our
> 	"basesrc" requirement, and i guess it won't even fit into "gnusrc".
> 	what shall we do about it?  no updates for openssl portion?
>
> itojun
>
>
> /* ====================================================================
>  * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
>  *
>  * Portions of the attached software ("Contribution") are developed by
>  * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
>  *
>  * The Contribution is licensed pursuant to the OpenSSL open source
>  * license provided above.
>  *
>  * In addition, Sun covenants to all licensees who provide a reciprocal
>  * covenant with respect to their own patents if any, not to sue under
>  * current and future patent claims necessarily infringed by the making,
>  * using, practicing, selling, offering for sale and/or otherwise
>  * disposing of the Contribution as delivered hereunder
>  * (or portions thereof), provided that such covenant shall not apply:
>  *  1) for code that a licensee deletes from the Contribution;
>  *  2) separates from the Contribution; or
>  *  3) for infringements caused by:
>  *       i) the modification of the Contribution or
>  *      ii) the combination of the Contribution with other software or
>  *          devices where such combination causes the infringement.
>  *
>  * The elliptic curve binary polynomial software is originally written by
>  * Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems
> Laboratories. *
>  */
>
>
> % grep -l 'Sun Micro' `find . -name \*.c -print`
> ./apps/ecparam.c
> ./apps/s_server.c
> ./apps/speed.c
> ./crypto/asn1/t_pkey.c
> ./crypto/bn/bn_gf2m.c
> ./crypto/bn/bntest.c
> ./crypto/cryptlib.c
> ./crypto/ec/ec2_mult.c
> ./crypto/ec/ec2_smpl.c
> ./crypto/ec/ec_curve.c
> ./crypto/ec/ec_cvt.c
> ./crypto/ec/ec_key.c
> ./crypto/ec/ec_lib.c
> ./crypto/ec/ec_mult.c
> ./crypto/ec/ecp_mont.c
> ./crypto/ec/ecp_nist.c
> ./crypto/ec/ecp_recp.c
> ./crypto/ec/ecp_smpl.c
> ./crypto/ec/ectest.c
> ./crypto/ecdh/ecdhtest.c
> ./crypto/ecdh/ech_key.c
> ./crypto/ecdh/ech_lib.c
> ./crypto/ecdh/ech_ossl.c
> ./crypto/ecdsa/ecdsatest.c
> ./crypto/engine/eng_fat.c
> ./crypto/engine/eng_list.c
> ./crypto/engine/eng_openssl.c
> ./crypto/engine/tb_ecdh.c
> ./ssl/s3_both.c
> ./ssl/s3_clnt.c
> ./ssl/s3_lib.c
> ./ssl/s3_srvr.c
> ./ssl/ssl_cert.c
> ./ssl/ssl_ciph.c
> ./ssl/ssl_lib.c
> ./ssl/ssltest.c