Fwd: kiax_0.8.4-3_i386.changes REJECTED

[George Danchev]

On Saturday 01 October 2005 03:33, Mark Purcell wrote:
> George,

Hello all,

> We have setup a shared working enviroment at
> http://svn.debian.org/wsvn/pkg-voip/kiax is you would like to help out
> directly with the Debian package.
>
> You can request an account at http://alioth.debian.org and then we can set
> you up with svn commit access.

Sure. I have been registered alioth user since 2004-10-27. My login name is 
danchev-guest and I agree to help out as much as I can. I'll join the mailing 
list also.

On Wednesday 28 September 2005 00:49, Joerg Jaspert wrote:
> Hi Maintainer,
>
> sorry, rejected for now.
> The source contains lib/iLBC, which at least has a rfc3951.txt, which
> license is non-free. Also all the other source files there state a (C) by
> Internet Society (2004), *All Rights Reserved*. Looking at the name i doubt
> its free, and searching for the library name got me to a site, having a
> license link[1][2] which starts so horrible non-free that I stopped reading
> it.

Good catch. We have missed that one within the upstream tarball of 
kiax-0.8.4.tar.bz2 as found at SF. I will ask debian-legal for advise about 
iLBC but as a freeware license [1] it doesn't sound good enough even the 
redistribution is allowed since it limits the commercial use at least. Anyway 
that's an iaxclient issue shipped with the upstream kiax tarball (the lib/ 
directory), but we have already had iaxclient packages in Debian archive 
(iaxclient-0.0+cvs20050725) without lib/iLBC. While looking at the kiax 0.8.4 
sources I realized that it can compile with the lib/ directory from 
iaxclient-0.0+cvs20050725 debian source package (which I believe is DFSG'ed). 
In fact it did and works, but that needs a close investigaton to see what we 
lose without iLBC. I would like to follow the shared library way Mikael 
Magnusson suggested at bug #319201 and build depend on libiaxclient-dev while 
educate kiax of using it.

> Next issue is that your debian/copyright is wrong, its missing a bit
> of license information. You need to list *all* different copyright holders
> and licenses that are in your sourcepackage.
> Missing are at least lib/libspeex (which has at least 2 different licenses,
> maybe more).,

Agreed. I had a look at excellent iaxclient-0.0+cvs20050725/debian/copyright 
file and it also doesn't mention lib/libspeex copyright holders and licenses. 
I believe it should be fix there also.

> While Im at it:
> debian/README.Debian is pretty useless atm, could be removed.

Will be revised and if still empty will be removed. Thanks.

> [1] One of the few links that were readable, the rest of the site is hidden
> behind stupid flash-stuff.
> [2] ilbcfreeware.org. Lets hope its the right site for this lib, but
> looking at the purpose of the lib and the text of the site and what its for
> I simply assume this.

I would also suggest kiax authors to follow the comments if the Global IP 
Sound iLBC Public License, v2.0 - IETF Version is a really (non)-free license 
at: 

http://lists.debian.org/debian-legal/2005/10/msg00000.html

will help avoid possible legal issues concerning the project ;-)

> If you get these points fixed/cleared you can go in, but for now you are
> out. :)

Absolutely agreed and we hope to survive ;-)
Sorry for wasting your time with missing legal/license notes and URLs.

-- 
pub 4096R/0E4BD0AB 2003-03-18 <people.fccf.net/danchev/key pgp.mit.edu>
fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB