From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: Re: openssl is now a dependency of guix: possible license conflict? Date: Wed, 16 Aug 2017 22:29:57 -0400 Message-ID: <87y3qjncyi.fsf@netris.org> References: <87tw17ox0x.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:37758) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1diAZv-0003OK-5l for guix-devel@gnu.org; Wed, 16 Aug 2017 22:30:36 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1diAZr-0001Fa-Nf for guix-devel@gnu.org; Wed, 16 Aug 2017 22:30:35 -0400 Received: from world.peace.net ([50.252.239.5]:43098) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1diAZr-00015o-JK for guix-devel@gnu.org; Wed, 16 Aug 2017 22:30:31 -0400 In-Reply-To: <87tw17ox0x.fsf@gmail.com> (Alex Vong's message of "Thu, 17 Aug 2017 08:31:10 +0800") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Alex Vong Cc: guix-devel@gnu.org Hi Alex, Alex Vong writes: > Recently, guix changes to use guile-git for 'guix pull', which is a > libgit2 binding for guile, while libgit2 itself uses openssl to talk > over https. > > Now the potential problem is that guix is licensed in gpl3+ while > openssl is licensed in openssl. It is well-known the two licenses have > incompatibility disallowing one from distributing the result of linking > a gpl program with openssl[0]. Thanks for bringing this to our attention. I looked into this, and it turns out that Debian's libgit2 package no longer depends on OpenSSL: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798421 libgit2 can use libcurl for HTTPS support, in which case it does not need OpenSSL. Our libcurl already uses GnuTLS instead of OpenSSL. So, I expect this issue can be easily resolved. I'll work on it. Thanks, Mark