[Python-modules-team] Bug#515200: Bug#515200: OpenSSL linked clause

[Mike Palmer]

Piotr Ożarowski wrote:
> Mike,
>
> Just one questions: are you sure it can be linked with OpenSSL?
>
> FTR: I didn't check, I'm asking you since you seems to be sure we're
> allowed to do so. As Sandro pointed out, "openssl" keyword triggers red
> light.
>   
I never said I was "sure" as I am no legal expert on the matter. All I 
can do is deduct logically that it shouldn't be a problem based on 
similar packages already under debian stable.

To reverse list dependencies under lenny for libcurl3 (OpenSSL version):
apt-cache showpkg libcurl3

That shows the same kind of thing from other packages in language like 
perl and php using openssl. Then there are a whole variety of packages 
unrelated to curl under debian stable that use libssl0.9.8/OpenSSL as well.

To reverse list dependencies under lenny that require openssl directly:
apt-cache showpkg libssl0.9.8

Maybe ask debian legal if you want a better answer than what I can give. 
But think about the situation where they all agree and say you can't use 
it because of the linking stipulation to openssl in their license. There 
are around 3 times as many packages under debian that use openssl 
instead of gnutls. At that point somebody needs to go and change up to 
~500 different packages under debian stable right now. That is why I 
think its probably ok if you guys want to use it too. That is unless I 
am just completely missing the boat on something else which I very well 
could be. ;)