aside about OpenSSL + (L)GPL (was Re: Making gpgme dependency optional)

[Robert McQueen <rob endlessm com>]

Random drive-by because I'm a sucker for this kind of thing... :P

On 01/06/17 20:30, Colin Walters wrote:
> > I am trying to avoid OpenSSL in combination with (L)GPL projects due to 
> > license incompatibility.
>
> At least for Fedora:
> https://lists.fedoraproject.org/archives/list/devel lists fedoraproject 
> org/message/CWVLCRELXWLH3Q45ZZUCCHT3JQB6CF3J/
> Direct link: https://fedoraproject.org/wiki/Licensing:FAQ#What.27s_the_deal_with_the_OpenSSL_license.3F
>
> I'll admit I don't fully understand how that exemption is created.  Does
> one just need sufficient "stature" to declare it?  Some legal equivalent of
> sitting in the captain's chair and saying "make it so"?

Pretty much. ;) It's a little more nuanced than that because what you're
actually saying is, the OpenSSL copyright holders don't care enough to
try and challenge this proclamation - which, in practice, they don't -
as evidenced by their non-enforcement of this attribution clause.

Or, alternatively, that even if they did wish to challenge it, you have
assembled some sufficiently compelling argumentation to support your
argument it's part of the system that they would lose, or revert once
more to not wanting to bother. :)

> But actually, is there really a problem with OpenSSL and the *L*GPL (which
> is what ostree is under?)

Yes, the LGPL is directional, it draws a distinction between "a program
that uses the library" and the parts that go in to make the library
itself. If some other arbitrarily licensed program linked to OpenSSL and
some LGPL stuff, that's fine and dandy, but the stuff the library is
based on isn't exempted from the GPL-like restrictions.

In any case, this argument that LGPL + arbitrary is OK would fall down
in the context of a GPL program using your LGPL library. That is
permissable only when everything you put together can be
considered/compatible with the GPL.

IANAL IDKFA IDDQD etc... :)

Cheers,
Rob

........................................................................

Robert McQueen  |  +1.415.413.4159  |  Endless <http://endlessm.com/>