Bug#747031: fixed in python-debian 0.1.22

[Stefano Zacchiroli]

On Sat, Jun 14, 2014 at 12:00:27AM +1000, Stuart Prescott wrote:
> > but the alternative to this hacky crap is to modify our own license
> > to allow linking with OpenSSL.  Which honestly is probably not too
> > hard since there were only a handful of contributors to
> > python_support.py.
> 
> It would be easy to do (yes, I did look at git history to see how many
> people have touched it a couple of weeks ago) but I don't think it
> really helps.  Relicensing would only shift the problem on to anything
> that makes use of python-debian -- if we were to accept that hashlib
> and GPL'd python-debian were incompatible, then GPL'd stuff would also
> not be able to import debian_support for the same reasons.

That is correct. But as python-debian maintainers I think that ensuring
that our own code is not affected by this bug should be our primary
concern. More precisely, I think we should at this point make sure that
all options on the table are viable.

If relicensing that specific module under GPL with OpenSSL exception is
easy to do --- and apparently we all agree with that --- I think we
should do that.  That way we are free to choose between multiple
technical solutions, no matter if they use Python's hashlib or not.
Whether python-debian client code will be *actually* affected by the
license issues will depend on the actual technical solution we choose.

So, for now, I suggest to both go ahead with the relicensing (I can take
care of mailing the people on the list I've already posted, say, a week
for now if they don't comment on this thread) *and* investigate if we
have alternative technical solutions.

Cheers.
-- 
Stefano Zacchiroli  . . . . . . .  zack at upsilon.cc . . . . o . . . o . o
Maître de conférences . . . . . http://upsilon.cc/zack . . . o . . . o o
Former Debian Project Leader  . . @zack on identi.ca . . o o o . . . o .
« the first rule of tautology club is the first rule of tautology club »
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 811 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-python-debian-maint/attachments/20140613/7ef7d666/attachment.sig>