[Pkg-openldap-devel] Bug#368297: Does OpenLDAP has any GPLv2 dependency?

[Simon McVittie]

On Tue, 05 Nov 2013 at 15:45:07 +0100, Carlos Alberto Lopez Perez wrote:
> On 24/04/12 17:25, Thorsten Glaser wrote:
> > this bug has been brought to my attention by my boss today.
> > If I understand the situation correctly, the problem is:
> > 
> > • OpenLDAP links against GnuTLS (gnutls26)
> > • gnutls26 links against gcrypt, which has the bug
> > • gnutls28 links against nettle, but also gmp which is LGPLv3+
> > • OpenLDAP thus can’t link against gnutls28, as it has reverse
> >   dependencies that are not LGPLv3-/GPLv3-compatible
> > • the package affected is libnss-ldap though
> 
> If there isn't any GPLv2 reverse dependency, then OpenLDAP can be just
> recompiled to link against gnutls28 and this long standing bug will be
> fixed.

As far as I understand it, this became simpler in recent months:

* gnutls28 links against gmp, which was relicensed to "LGPL-3+ or GPL-2+",
  making it possible to link GPL-2 (only) code to gnutls28

So would linking OpenLDAP to gnutls28 (#745231, tagged pending) close this
RC bug as a side-effect?

    S