openssl is now a dependency of guix: possible license conflict?

[Alex Vong <alexvong1995@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 783 bytes --]

Hello guix,

Recently, guix changes to use guile-git for 'guix pull', which is a
libgit2 binding for guile, while libgit2 itself uses openssl to talk
over https.

Now the potential problem is that guix is licensed in gpl3+ while
openssl is licensed in openssl. It is well-known the two licenses have
incompatibility disallowing one from distributing the result of linking
a gpl program with openssl[0].

First, We have to figure out if we are linking guix with openssl. Well,
libgit2 is dynamically linked to openssl while guile-git uses
'dynamic-link' to load libgit2. So these libraries are linked
together. The part that I am not sure is that whether guix is linked
with guile-git.

What do you think?

Cheers,
Alex

[0]: https://people.gnome.org/~markmc/openssl-and-the-gpl.html

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]