From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alex Vong Subject: openssl is now a dependency of guix: possible license conflict? Date: Thu, 17 Aug 2017 08:31:10 +0800 Message-ID: <87tw17ox0x.fsf@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50120) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1di8im-0006qs-Pd for guix-devel@gnu.org; Wed, 16 Aug 2017 20:31:37 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1di8ih-0003Mb-TS for guix-devel@gnu.org; Wed, 16 Aug 2017 20:31:36 -0400 Received: from mail-pg0-x22b.google.com ([2607:f8b0:400e:c05::22b]:32922) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1di8ih-0003LX-NH for guix-devel@gnu.org; Wed, 16 Aug 2017 20:31:31 -0400 Received: by mail-pg0-x22b.google.com with SMTP id t3so3313296pgt.0 for ; Wed, 16 Aug 2017 17:31:30 -0700 (PDT) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org --=-=-= Content-Type: text/plain Hello guix, Recently, guix changes to use guile-git for 'guix pull', which is a libgit2 binding for guile, while libgit2 itself uses openssl to talk over https. Now the potential problem is that guix is licensed in gpl3+ while openssl is licensed in openssl. It is well-known the two licenses have incompatibility disallowing one from distributing the result of linking a gpl program with openssl[0]. First, We have to figure out if we are linking guix with openssl. Well, libgit2 is dynamically linked to openssl while guile-git uses 'dynamic-link' to load libgit2. So these libraries are linked together. The part that I am not sure is that whether guix is linked with guile-git. What do you think? Cheers, Alex [0]: https://people.gnome.org/~markmc/openssl-and-the-gpl.html --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEdZDkzSn0Cycogr9IxYq4eRf1Ea4FAlmU484ACgkQxYq4eRf1 Ea4nTg/9G6iMHRZy1mC+FuRg9gMsBBXHUmkiNCp4wC/UdatD0PQLimmDPrGonpYz DOcfeOt90/rGZA2UZKtIVck8cVBUeebgBBL1zJjoC/YAsbP5KlWrNkYedJp9wRFA n1ytu62hcd9RzwDD0Zydma+RDIQZbrkhiCGXRHaLKTUUjuKPdmJ2zv7doeGSrSYo 4+sNzTduuLJonz6BUE65DzZr6+JWeMpBXVjVWnxguqNsD4A91Y9XZg7XhobDQRtR 2MUnR2GVUO8ADY6y5uUNEriBI0WFkeKW9hWnMVh+nZfjafdXnkMYjMYjzZOFA7ES 4B/Z5gfpkCPPHym7fyCG/NK3c7RvOEZ/w/VJASfynhNhnng1sgkuD4O6G0s/kFLB f5Bn0Go3gQESGyPxjwSg2cWhfxskgYaFBxQrvdNcCj3/UuIYIqkpoUgyTQ4lgHVb BiY5ISRxrpGSJN+4ectjAGT+g98zysXcQDRCrVfP9Ft920QcUnlu6QvNkURMk1pg GRHhb5ZoyU33nPcobqKe6GEXt/ZA16sp7c65wSKh83nPppx4nQXvRJUX1Of5yix+ dTJNnV0cbylrwHeQksUEmQTlFh54odOBa1MfyZWTVH5m2sBad8pWzQ3paxEDKj8X wLYH+6CQ9euATEUR4bMeAB7R2cibyCpycBZd//YVMBUe1qxL3Bo= =SRUw -----END PGP SIGNATURE----- --=-=-=--