[pkg-gnupg-maint] RFH libksba license problem: src/cms.asn

Andreas Metzler ametzler at bebt.de
Sat Dec 9 11:16:07 UTC 2017


Hello,

libksba's src/cms.asn contains a copy of a part of RFC2630. Copyright is
insane (for code):
-- Copyright (C) The Internet Society (1999).  All Rights Reserved.
--
-- This document and translations of it may be copied and furnished to
-- others, and derivative works that comment on or otherwise explain it
-- or assist in its implementation may be prepared, copied, published
-- and distributed, in whole or in part, without restriction of any
-- kind, provided that the above copyright notice and this paragraph are
-- included on all such copies and derivative works.  However, this
-- document itself may not be modified in any way, such as by removing
-- the copyright notice or references to the Internet Society or other
-- Internet organizations, except as needed for the purpose of
-- developing Internet standards in which case the procedures for
-- copyrights defined in the Internet Standards process must be
-- followed, or as required to translate it into languages other than
-- English.

The copy in libksba *is* slightly modified and external imports are
expanded (rfc2459). This rfc dates from 1999 when (afaik) ietf made no
special case for re-usage of code. Only rfcs after Nov 11 2008 carry a
special provision for Code Components, allowing usage under a standard
3-clause BSD license.

RFC2630 has been superceded by 3369 (2002/08), 3852 (2004/07) and 5652
(2009/09). So the latest version of the CMS ASN.1 Module definition
would be available under a useable license. However some parts like the
Algorithm Identifiers moved to 3370 which does not seem to have a
successor with sane license.

In KSBA a helper binary generates C code from src/cms.asn.

I cannot see any easy way to fix this:
* Get RFC2630 relicensed.
* Upgrade to RFC5652 and RFC3370, get RFC3370 relicensed.

Ideas, somebody? Am I missing something?

TIA, cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'



More information about the pkg-gnupg-maint mailing list