From kimberly77@example.net Thu Sep 01 18:29:39 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 11281 invoked from network); 1 Sep 2005 18:29:37 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 1 Sep 2005 18:29:37 -0000 Received: (qmail 46917 invoked by uid 500); 1 Sep 2005 18:29:34 -0000 Delivered-To: kimberly77@example.net Received: (qmail 46671 invoked by uid 500); 1 Sep 2005 18:29:33 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 46623 invoked by uid 99); 1 Sep 2005 18:29:32 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 11:29:32 -0700 X-ASF-Spam-Status: No, hits=0.1 required=10.0 tests=FORGED_RCVD_HELO X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO ajax.cnchost.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 11:29:46 -0700 Received: from rcsv650.rowe-clan.net (c-24-13-128-132.hsd1.il.comcast.net [83.161.120.155]) by ajax.cnchost.com id OAA14923; Thu, 1 Sep 2005 14:29:23 -0400 (EDT) [ConcentricHost SMTP Relay 1.17] Errors-To: <kimberly77@example.net> Message-Id: <kimberly77@example.net> X-Mailer: QUALCOMM Windows Eudora Version 83.161.120.155 Date: Thu, 01 Sep 2005 13:20:13 -0500 To: Justin Erenkrantz <kimberly77@example.net> From: "William A. Rowe, Jr." <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider Cc: kimberly77@example.net In-Reply-To: <kimberly77@example.net> References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N At 05:32 PM 8/31/2005, Justin Erenkrantz wrote: >--On August 30, 2005 9:58:58 AM -0400 Bill Stoddard <kimberly77@example.net> wrote: > >>This seems to be the most reasonable approach. I would argue today that >>BC is not open source, by the OSI definition >>(http://www.opensource.org/docs/definition.php) due to the presence of >>the IDEA algorithm in their distribition. They are violating their own >>license. > >One of the reasons I'm no longer a fan of the MIT/X11 licenses is because they don't consider patents. This is just one more example of how the world has changed and those licenses need to be frowned upon. -- justin But that is a non sequitur. Patent language in the licences will only provide address specific cases and repercussions, it is not a blank check to avoid all IP issues :) The fact that it's there is only protecting you from willful harm by the developers, and not that kimberly77@example.net. Bill --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Thu Sep 01 19:49:50 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 45818 invoked from network); 1 Sep 2005 19:49:50 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 1 Sep 2005 19:49:50 -0000 Received: (qmail 78002 invoked by uid 500); 1 Sep 2005 19:49:45 -0000 Delivered-To: kimberly77@example.net Received: (qmail 77893 invoked by uid 500); 1 Sep 2005 19:49:44 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 77880 invoked by uid 99); 1 Sep 2005 19:49:44 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 12:49:44 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO chi.mobile-health-diary.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 01 Sep 2005 12:49:58 -0700 Received: (qmail 19191 invoked from network); 1 Sep 2005 19:49:40 -0000 Received: from ool-43560634.dyn.optonline.net (HELO ?83.161.120.155?) (kimberly77@example.net) by b014.internal.mobile-health-diary.com with SMTP; 1 Sep 2005 19:49:40 -0000 In-Reply-To: <kimberly77@example.net> References: <kimberly77@example.net> <kimberly77@example.net> Mime-Version: 1.0 (Apple Message framework v733) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <kimberly77@example.net> Cc: Justin Erenkrantz <kimberly77@example.net> Content-Transfer-Encoding: 7bit From: "Geir Magnusson Jr." <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider Date: Thu, 1 Sep 2005 15:50:03 -0400 To: kimberly77@example.net X-Mailer: Apple Mail (2.733) X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Current solution I'm proposing : 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. OpenEJB isn't dependent on it, just lists it as a possibility if the JCE provider has it. 2) We take the ASN1 code from BC (it's BSD) and use that for the ASN1 encoding/decoding (has nothing to do w/ IDEA, but just a nice set of utils that happen to be in the BC jar) At this point, openEJB has no more BC dependency. The remaining part is in the [optional] Geronimo console, which uses BC to manipulate a keystore for managing digital certs. We can make that totally optional - that we don't ship w/ BC, and show a page telling the user the issue, what to do about it to get it to work, and a warning. Now it's up to the user to go off and find the BC jar and install it. Does that work for everyone? geir On Aug 31, 2005, at 6:21 PM, Justin Erenkrantz wrote: > --On August 30, 2005 7:18:53 AM -0400 "Geir Magnusson Jr." > <kimberly77@example.net> wrote: > > >> Another approach would be to petition bouncycastle.org to provide a >> distribution of the software w/o the algorithm included. >> > > +1. Otherwise, the dependency can not be redistributed by the > ASF. We have no use for 'submarine' patents in our distributions. > -- justin > > -- Geir Magnusson Jr 2397770910 kimberly77@example.net --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Thu Sep 01 19:59:56 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 50425 invoked from network); 1 Sep 2005 19:59:55 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 1 Sep 2005 19:59:55 -0000 Received: (qmail 92505 invoked by uid 500); 1 Sep 2005 19:59:54 -0000 Delivered-To: kimberly77@example.net Received: (qmail 92361 invoked by uid 500); 1 Sep 2005 19:59:53 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 92338 invoked by uid 99); 1 Sep 2005 19:59:53 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 12:59:53 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of kimberly77@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO xproxy.gmail.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 13:00:07 -0700 Received: by xproxy.gmail.com with SMTP id h28so452562wxd for <kimberly77@example.net>; Thu, 01 Sep 2005 12:59:50 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=LY0reXlFMbqInCMJq6LI7ZkKIuP56I5E+egeJemPVkjWMYPJtV1cV8pz7ZhXtb9UnIvK+mUV0srTQSso6QlsxWO4XspsGqb+gIZNEOJhee9EsP2zn6JOTFIcoPb2RLQHvYRDUu1a+k9llqPXI/j41WsIClJRbTe8swwhW4X+lbg= Received: by 83.161.120.155 with SMTP id 4mr1935wxi; Thu, 01 Sep 2005 12:59:50 -0700 (PDT) Received: by 83.161.120.155 with HTTP; Thu, 1 Sep 2005 12:59:50 -0700 (PDT) Message-ID: <kimberly77@example.net> Date: Thu, 1 Sep 2005 12:59:50 -0700 From: Davanum Srinivas <kimberly77@example.net> Reply-To: kimberly77@example.net To: "Geir Magnusson Jr." <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider Cc: kimberly77@example.net, Justin Erenkrantz <kimberly77@example.net> In-Reply-To: <kimberly77@example.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Directory project has some ASN1 code. no??? -- dims On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > Current solution I'm proposing : >=20 > 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. > OpenEJB isn't dependent on it, just lists it as a possibility if the > JCE provider has it. >=20 > 2) We take the ASN1 code from BC (it's BSD) and use that for the ASN1 > encoding/decoding (has nothing to do w/ IDEA, but just a nice set of > utils that happen to be in the BC jar) >=20 > At this point, openEJB has no more BC dependency. >=20 > The remaining part is in the [optional] Geronimo console, which uses > BC to manipulate a keystore for managing digital certs. We can make > that totally optional - that we don't ship w/ BC, and show a page > telling the user the issue, what to do about it to get it to work, > and a warning. >=20 > Now it's up to the user to go off and find the BC jar and install it. >=20 > Does that work for everyone? >=20 > geir >=20 >=20 > On Aug 31, 2005, at 6:21 PM, Justin Erenkrantz wrote: >=20 > > --On August 30, 2005 7:18:53 AM -0400 "Geir Magnusson Jr." > > <kimberly77@example.net> wrote: > > > > > >> Another approach would be to petition bouncycastle.org to provide a > >> distribution of the software w/o the algorithm included. > >> > > > > +1. Otherwise, the dependency can not be redistributed by the > > ASF. We have no use for 'submarine' patents in our distributions. > > -- justin > > > > >=20 > -- > Geir Magnusson Jr 2397770910 > kimberly77@example.net >=20 >=20 >=20 > --------------------------------------------------------------------- > DISCLAIMER: Discussions on this list are informational and educational > only, are not privileged and do not constitute legal advice. > --------------------------------------------------------------------- > To unsubscribe, e-mail: kimberly77@example.net > For additional commands, e-mail: kimberly77@example.net >=20 >=20 --=20 Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service Platform --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Thu Sep 01 20:48:20 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 68663 invoked from network); 1 Sep 2005 20:48:19 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 1 Sep 2005 20:48:19 -0000 Received: (qmail 79405 invoked by uid 500); 1 Sep 2005 20:48:13 -0000 Delivered-To: kimberly77@example.net Received: (qmail 79300 invoked by uid 500); 1 Sep 2005 20:48:12 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 79287 invoked by uid 99); 1 Sep 2005 20:48:12 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 13:48:12 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO chi.mobile-health-diary.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 01 Sep 2005 13:48:26 -0700 Received: (qmail 19429 invoked from network); 1 Sep 2005 20:48:08 -0000 Received: from ool-43560634.dyn.optonline.net (HELO ?83.161.120.155?) (kimberly77@example.net) by b014.internal.mobile-health-diary.com with SMTP; 1 Sep 2005 20:48:08 -0000 Mime-Version: 1.0 (Apple Message framework v733) In-Reply-To: <kimberly77@example.net> References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <kimberly77@example.net> Content-Transfer-Encoding: 7bit From: "Geir Magnusson Jr." <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider Date: Thu, 1 Sep 2005 16:48:32 -0400 To: kimberly77@example.net X-Mailer: Apple Mail (2.733) X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N yes, but according to Alan, it doesn't do the right thing. I'm not sure of the details. That was the first thing we considered. geir On Sep 1, 2005, at 3:59 PM, Davanum Srinivas wrote: > Directory project has some ASN1 code. no??? > > -- dims > > On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > >> Current solution I'm proposing : >> >> 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. >> OpenEJB isn't dependent on it, just lists it as a possibility if the >> JCE provider has it. >> >> 2) We take the ASN1 code from BC (it's BSD) and use that for the ASN1 >> encoding/decoding (has nothing to do w/ IDEA, but just a nice set of >> utils that happen to be in the BC jar) >> >> At this point, openEJB has no more BC dependency. >> >> The remaining part is in the [optional] Geronimo console, which uses >> BC to manipulate a keystore for managing digital certs. We can make >> that totally optional - that we don't ship w/ BC, and show a page >> telling the user the issue, what to do about it to get it to work, >> and a warning. >> >> Now it's up to the user to go off and find the BC jar and install it. >> >> Does that work for everyone? >> >> geir >> >> >> On Aug 31, 2005, at 6:21 PM, Justin Erenkrantz wrote: >> >> >>> --On August 30, 2005 7:18:53 AM -0400 "Geir Magnusson Jr." >>> <kimberly77@example.net> wrote: >>> >>> >>> >>>> Another approach would be to petition bouncycastle.org to provide a >>>> distribution of the software w/o the algorithm included. >>>> >>>> >>> >>> +1. Otherwise, the dependency can not be redistributed by the >>> ASF. We have no use for 'submarine' patents in our distributions. >>> -- justin >>> >>> >>> >> >> -- >> Geir Magnusson Jr 2397770910 >> kimberly77@example.net >> >> >> >> --------------------------------------------------------------------- >> DISCLAIMER: Discussions on this list are informational and >> educational >> only, are not privileged and do not constitute legal advice. >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: kimberly77@example.net >> For additional commands, e-mail: kimberly77@example.net >> >> >> > > > -- > Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service > Platform > > --------------------------------------------------------------------- > DISCLAIMER: Discussions on this list are informational and educational > only, are not privileged and do not constitute legal advice. > --------------------------------------------------------------------- > To unsubscribe, e-mail: kimberly77@example.net > For additional commands, e-mail: kimberly77@example.net > > -- Geir Magnusson Jr 2397770910 kimberly77@example.net --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Thu Sep 01 20:50:13 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 69838 invoked from network); 1 Sep 2005 20:50:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 1 Sep 2005 20:50:13 -0000 Received: (qmail 80498 invoked by uid 500); 1 Sep 2005 20:50:07 -0000 Delivered-To: kimberly77@example.net Received: (qmail 80332 invoked by uid 500); 1 Sep 2005 20:50:06 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 80316 invoked by uid 99); 1 Sep 2005 20:50:06 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 13:50:06 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of kimberly77@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO xproxy.gmail.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 13:50:21 -0700 Received: by xproxy.gmail.com with SMTP id h28so462184wxd for <kimberly77@example.net>; Thu, 01 Sep 2005 13:49:55 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=PcudYtwjOxILgihODgHnup3wySM0TeaOVkJiH5MW1MyU1K2DjSLsyEcAhjl41zmFXjr/INc7hQbBwk8jtOCz2u5ITdnE7dNoFLV0DSy+Bv71EKTWtiYpdBAIXmC8SfkMWejz1zTUnK1tjn97WhECaFEaMJwHAH07aLwcZSBlE3k= Received: by 83.161.120.155 with SMTP id 4mr3666wxi; Thu, 01 Sep 2005 13:49:55 -0700 (PDT) Received: by 83.161.120.155 with HTTP; Thu, 1 Sep 2005 13:49:55 -0700 (PDT) Message-ID: <kimberly77@example.net> Date: Thu, 1 Sep 2005 13:49:55 -0700 From: Davanum Srinivas <kimberly77@example.net> Reply-To: kimberly77@example.net To: "Geir Magnusson Jr." <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider Cc: kimberly77@example.net In-Reply-To: <kimberly77@example.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N ok thanks. (but should we not get it fixed :) -- dims On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > yes, but according to Alan, it doesn't do the right thing. I'm not > sure of the details. That was the first thing we considered. >=20 > geir >=20 > On Sep 1, 2005, at 3:59 PM, Davanum Srinivas wrote: >=20 > > Directory project has some ASN1 code. no??? > > > > -- dims > > > > On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > > > >> Current solution I'm proposing : > >> > >> 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. > >> OpenEJB isn't dependent on it, just lists it as a possibility if the > >> JCE provider has it. > >> > >> 2) We take the ASN1 code from BC (it's BSD) and use that for the ASN1 > >> encoding/decoding (has nothing to do w/ IDEA, but just a nice set of > >> utils that happen to be in the BC jar) > >> > >> At this point, openEJB has no more BC dependency. > >> > >> The remaining part is in the [optional] Geronimo console, which uses > >> BC to manipulate a keystore for managing digital certs. We can make > >> that totally optional - that we don't ship w/ BC, and show a page > >> telling the user the issue, what to do about it to get it to work, > >> and a warning. > >> > >> Now it's up to the user to go off and find the BC jar and install it. > >> > >> Does that work for everyone? > >> > >> geir > >> > >> > >> On Aug 31, 2005, at 6:21 PM, Justin Erenkrantz wrote: > >> > >> > >>> --On August 30, 2005 7:18:53 AM -0400 "Geir Magnusson Jr." > >>> <kimberly77@example.net> wrote: > >>> > >>> > >>> > >>>> Another approach would be to petition bouncycastle.org to provide a > >>>> distribution of the software w/o the algorithm included. > >>>> > >>>> > >>> > >>> +1. Otherwise, the dependency can not be redistributed by the > >>> ASF. We have no use for 'submarine' patents in our distributions. > >>> -- justin > >>> > >>> > >>> > >> > >> -- > >> Geir Magnusson Jr 2397770910 > >> kimberly77@example.net > >> > >> > >> > >> --------------------------------------------------------------------- > >> DISCLAIMER: Discussions on this list are informational and > >> educational > >> only, are not privileged and do not constitute legal advice. > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: kimberly77@example.net > >> For additional commands, e-mail: kimberly77@example.net > >> > >> > >> > > > > > > -- > > Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service > > Platform > > > > --------------------------------------------------------------------- > > DISCLAIMER: Discussions on this list are informational and educational > > only, are not privileged and do not constitute legal advice. > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: kimberly77@example.net > > For additional commands, e-mail: kimberly77@example.net > > > > >=20 > -- > Geir Magnusson Jr 2397770910 > kimberly77@example.net >=20 >=20 >=20 > --------------------------------------------------------------------- > DISCLAIMER: Discussions on this list are informational and educational > only, are not privileged and do not constitute legal advice. > --------------------------------------------------------------------- > To unsubscribe, e-mail: kimberly77@example.net > For additional commands, e-mail: kimberly77@example.net >=20 >=20 --=20 Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service Platform --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Thu Sep 01 22:30:00 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 19197 invoked from network); 1 Sep 2005 22:29:59 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 1 Sep 2005 22:29:59 -0000 Received: (qmail 58644 invoked by uid 500); 1 Sep 2005 22:29:55 -0000 Delivered-To: kimberly77@example.net Received: (qmail 58407 invoked by uid 500); 1 Sep 2005 22:29:54 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 58393 invoked by uid 99); 1 Sep 2005 22:29:54 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 15:29:54 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO chi.mobile-health-diary.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 01 Sep 2005 15:30:08 -0700 Received: (qmail 19902 invoked from network); 1 Sep 2005 22:29:50 -0000 Received: from ool-43560634.dyn.optonline.net (HELO ?83.161.120.155?) (kimberly77@example.net) by b014.internal.mobile-health-diary.com with SMTP; 1 Sep 2005 22:29:50 -0000 Mime-Version: 1.0 (Apple Message framework v733) In-Reply-To: <kimberly77@example.net> References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <kimberly77@example.net> Content-Transfer-Encoding: 7bit From: "Geir Magnusson Jr." <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider Date: Thu, 1 Sep 2005 18:30:13 -0400 To: kimberly77@example.net X-Mailer: Apple Mail (2.733) X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Get BC fixed? No doubt. But first we needed to put out the fire... On Sep 1, 2005, at 4:49 PM, Davanum Srinivas wrote: > ok thanks. (but should we not get it fixed :) > > -- dims > > On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > >> yes, but according to Alan, it doesn't do the right thing. I'm not >> sure of the details. That was the first thing we considered. >> >> geir >> >> On Sep 1, 2005, at 3:59 PM, Davanum Srinivas wrote: >> >> >>> Directory project has some ASN1 code. no??? >>> >>> -- dims >>> >>> On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: >>> >>> >>>> Current solution I'm proposing : >>>> >>>> 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. >>>> OpenEJB isn't dependent on it, just lists it as a possibility if >>>> the >>>> JCE provider has it. >>>> >>>> 2) We take the ASN1 code from BC (it's BSD) and use that for the >>>> ASN1 >>>> encoding/decoding (has nothing to do w/ IDEA, but just a nice >>>> set of >>>> utils that happen to be in the BC jar) >>>> >>>> At this point, openEJB has no more BC dependency. >>>> >>>> The remaining part is in the [optional] Geronimo console, which >>>> uses >>>> BC to manipulate a keystore for managing digital certs. We can >>>> make >>>> that totally optional - that we don't ship w/ BC, and show a page >>>> telling the user the issue, what to do about it to get it to work, >>>> and a warning. >>>> >>>> Now it's up to the user to go off and find the BC jar and >>>> install it. >>>> >>>> Does that work for everyone? >>>> >>>> geir >>>> >>>> >>>> On Aug 31, 2005, at 6:21 PM, Justin Erenkrantz wrote: >>>> >>>> >>>> >>>>> --On August 30, 2005 7:18:53 AM -0400 "Geir Magnusson Jr." >>>>> <kimberly77@example.net> wrote: >>>>> >>>>> >>>>> >>>>> >>>>>> Another approach would be to petition bouncycastle.org to >>>>>> provide a >>>>>> distribution of the software w/o the algorithm included. >>>>>> >>>>>> >>>>>> >>>>> >>>>> +1. Otherwise, the dependency can not be redistributed by the >>>>> ASF. We have no use for 'submarine' patents in our distributions. >>>>> -- justin >>>>> >>>>> >>>>> >>>>> >>>> >>>> -- >>>> Geir Magnusson Jr 2397770910 >>>> kimberly77@example.net >>>> >>>> >>>> >>>> ------------------------------------------------------------------- >>>> -- >>>> DISCLAIMER: Discussions on this list are informational and >>>> educational >>>> only, are not privileged and do not constitute legal advice. >>>> ------------------------------------------------------------------- >>>> -- >>>> To unsubscribe, e-mail: kimberly77@example.net >>>> For additional commands, e-mail: kimberly77@example.net >>>> >>>> >>>> >>>> >>> >>> >>> -- >>> Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service >>> Platform >>> >>> -------------------------------------------------------------------- >>> - >>> DISCLAIMER: Discussions on this list are informational and >>> educational >>> only, are not privileged and do not constitute legal advice. >>> -------------------------------------------------------------------- >>> - >>> To unsubscribe, e-mail: kimberly77@example.net >>> For additional commands, e-mail: kimberly77@example.net >>> >>> >>> >> >> -- >> Geir Magnusson Jr 2397770910 >> kimberly77@example.net >> >> >> >> --------------------------------------------------------------------- >> DISCLAIMER: Discussions on this list are informational and >> educational >> only, are not privileged and do not constitute legal advice. >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: kimberly77@example.net >> For additional commands, e-mail: kimberly77@example.net >> >> >> > > > -- > Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service > Platform > > --------------------------------------------------------------------- > DISCLAIMER: Discussions on this list are informational and educational > only, are not privileged and do not constitute legal advice. > --------------------------------------------------------------------- > To unsubscribe, e-mail: kimberly77@example.net > For additional commands, e-mail: kimberly77@example.net > > -- Geir Magnusson Jr 2397770910 kimberly77@example.net --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Thu Sep 01 22:49:25 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 25489 invoked from network); 1 Sep 2005 22:49:25 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 1 Sep 2005 22:49:25 -0000 Received: (qmail 75751 invoked by uid 500); 1 Sep 2005 22:49:25 -0000 Delivered-To: kimberly77@example.net Received: (qmail 75199 invoked by uid 500); 1 Sep 2005 22:47:45 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 75185 invoked by uid 99); 1 Sep 2005 22:47:45 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 15:47:45 -0700 X-ASF-Spam-Status: No, hits=1.9 required=10.0 tests=RCVD_BY_IP,RCVD_IN_BL_SPAMCOP_NET,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of kimberly77@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO xproxy.gmail.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 01 Sep 2005 15:47:59 -0700 Received: by xproxy.gmail.com with SMTP id i27so67422wxd for <kimberly77@example.net>; Thu, 01 Sep 2005 15:47:42 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=f1Xy0WQGh7s/RrelrnvBeMnDWNHMq220ZMvxb0fDcq01odJwVBC+Hr1UtC25NCJSt3rsPcylSeWJAyK2+eWtMVZKpQ/kFleeRE3m6rm4mFAahl4mxRHIF0fLCsgzuURcz+8hexWYwwIfomjwtwnoqWUJa7s7mgciZhoMKPh9AMA= Received: by 83.161.120.155 with SMTP id r6mr88283wxr; Thu, 01 Sep 2005 15:47:42 -0700 (PDT) Received: by 83.161.120.155 with HTTP; Thu, 1 Sep 2005 15:47:42 -0700 (PDT) Message-ID: <kimberly77@example.net> Date: Thu, 1 Sep 2005 15:47:42 -0700 From: Davanum Srinivas <kimberly77@example.net> Reply-To: kimberly77@example.net To: "Geir Magnusson Jr." <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider Cc: kimberly77@example.net In-Reply-To: <kimberly77@example.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N no, i meant the Directory code :). Yes, +1 to put out the fire. On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > Get BC fixed? No doubt. But first we needed to put out the fire... >=20 > On Sep 1, 2005, at 4:49 PM, Davanum Srinivas wrote: >=20 > > ok thanks. (but should we not get it fixed :) > > > > -- dims > > > > On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > > > >> yes, but according to Alan, it doesn't do the right thing. I'm not > >> sure of the details. That was the first thing we considered. > >> > >> geir > >> > >> On Sep 1, 2005, at 3:59 PM, Davanum Srinivas wrote: > >> > >> > >>> Directory project has some ASN1 code. no??? > >>> > >>> -- dims > >>> > >>> On 9/1/05, Geir Magnusson Jr. <kimberly77@example.net> wrote: > >>> > >>> > >>>> Current solution I'm proposing : > >>>> > >>>> 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. > >>>> OpenEJB isn't dependent on it, just lists it as a possibility if > >>>> the > >>>> JCE provider has it. > >>>> > >>>> 2) We take the ASN1 code from BC (it's BSD) and use that for the > >>>> ASN1 > >>>> encoding/decoding (has nothing to do w/ IDEA, but just a nice > >>>> set of > >>>> utils that happen to be in the BC jar) > >>>> > >>>> At this point, openEJB has no more BC dependency. > >>>> > >>>> The remaining part is in the [optional] Geronimo console, which > >>>> uses > >>>> BC to manipulate a keystore for managing digital certs. We can > >>>> make > >>>> that totally optional - that we don't ship w/ BC, and show a page > >>>> telling the user the issue, what to do about it to get it to work, > >>>> and a warning. > >>>> > >>>> Now it's up to the user to go off and find the BC jar and > >>>> install it. > >>>> > >>>> Does that work for everyone? > >>>> > >>>> geir > >>>> > >>>> > >>>> On Aug 31, 2005, at 6:21 PM, Justin Erenkrantz wrote: > >>>> > >>>> > >>>> > >>>>> --On August 30, 2005 7:18:53 AM -0400 "Geir Magnusson Jr." > >>>>> <kimberly77@example.net> wrote: > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>> Another approach would be to petition bouncycastle.org to > >>>>>> provide a > >>>>>> distribution of the software w/o the algorithm included. > >>>>>> > >>>>>> > >>>>>> > >>>>> > >>>>> +1. Otherwise, the dependency can not be redistributed by the > >>>>> ASF. We have no use for 'submarine' patents in our distributions. > >>>>> -- justin > >>>>> > >>>>> > >>>>> > >>>>> > >>>> > >>>> -- > >>>> Geir Magnusson Jr 2397770910 > >>>> kimberly77@example.net > >>>> > >>>> > >>>> > >>>> ------------------------------------------------------------------- > >>>> -- > >>>> DISCLAIMER: Discussions on this list are informational and > >>>> educational > >>>> only, are not privileged and do not constitute legal advice. > >>>> ------------------------------------------------------------------- > >>>> -- > >>>> To unsubscribe, e-mail: kimberly77@example.net > >>>> For additional commands, e-mail: kimberly77@example.net > >>>> > >>>> > >>>> > >>>> > >>> > >>> > >>> -- > >>> Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service > >>> Platform > >>> > >>> -------------------------------------------------------------------- > >>> - > >>> DISCLAIMER: Discussions on this list are informational and > >>> educational > >>> only, are not privileged and do not constitute legal advice. > >>> -------------------------------------------------------------------- > >>> - > >>> To unsubscribe, e-mail: kimberly77@example.net > >>> For additional commands, e-mail: kimberly77@example.net > >>> > >>> > >>> > >> > >> -- > >> Geir Magnusson Jr 2397770910 > >> kimberly77@example.net > >> > >> > >> > >> --------------------------------------------------------------------- > >> DISCLAIMER: Discussions on this list are informational and > >> educational > >> only, are not privileged and do not constitute legal advice. > >> --------------------------------------------------------------------- > >> To unsubscribe, e-mail: kimberly77@example.net > >> For additional commands, e-mail: kimberly77@example.net > >> > >> > >> > > > > > > -- > > Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service > > Platform > > > > --------------------------------------------------------------------- > > DISCLAIMER: Discussions on this list are informational and educational > > only, are not privileged and do not constitute legal advice. > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: kimberly77@example.net > > For additional commands, e-mail: kimberly77@example.net > > > > >=20 > -- > Geir Magnusson Jr 2397770910 > kimberly77@example.net >=20 >=20 >=20 > --------------------------------------------------------------------- > DISCLAIMER: Discussions on this list are informational and educational > only, are not privileged and do not constitute legal advice. > --------------------------------------------------------------------- > To unsubscribe, e-mail: kimberly77@example.net > For additional commands, e-mail: kimberly77@example.net >=20 >=20 --=20 Davanum Srinivas : http://wso2.com/ - Oxygenating The Web Service Platform --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Tue Sep 06 12:57:45 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 25077 invoked from network); 6 Sep 2005 12:57:44 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 6 Sep 2005 12:57:44 -0000 Received: (qmail 4135 invoked by uid 500); 6 Sep 2005 12:57:41 -0000 Delivered-To: kimberly77@example.net Received: (qmail 3957 invoked by uid 500); 6 Sep 2005 12:57:40 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 3939 invoked by uid 99); 6 Sep 2005 12:57:39 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Sep 2005 05:57:39 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO Boron.MeepZor.Com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Sep 2005 05:57:52 -0700 Received: from [83.161.120.155] (dmz-firewall [83.161.120.155]) by Boron.MeepZor.Com (8.12.8/8.12.8) with ESMTP id j86CvZhM007146; Tue, 6 Sep 2005 08:57:36 -0400 Message-ID: <kimberly77@example.net> Date: Tue, 06 Sep 2005 08:57:34 -0400 From: Bill Stoddard <kimberly77@example.net> Reply-To: kimberly77@example.net User-Agent: Mozilla Thunderbird 1.0.5 (Windows/20050711) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Geir Magnusson Jr." <kimberly77@example.net> CC: kimberly77@example.net, Justin Erenkrantz <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> In-Reply-To: <kimberly77@example.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Geir Magnusson Jr. wrote: > Current solution I'm proposing : > > 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. OpenEJB > isn't dependent on it, just lists it as a possibility if the JCE > provider has it. > > 2) We take the ASN1 code from BC (it's BSD) and use that for the ASN1 > encoding/decoding (has nothing to do w/ IDEA, but just a nice set of > utils that happen to be in the BC jar) > > At this point, openEJB has no more BC dependency. > > The remaining part is in the [optional] Geronimo console, which uses BC > to manipulate a keystore for managing digital certs. We can make that > totally optional - that we don't ship w/ BC, and show a page telling > the user the issue, what to do about it to get it to work, and a warning. > > Now it's up to the user to go off and find the BC jar and install it. > > Does that work for everyone? > > geir +1 --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Tue Sep 06 12:59:24 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 26184 invoked from network); 6 Sep 2005 12:59:23 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 6 Sep 2005 12:59:23 -0000 Received: (qmail 7950 invoked by uid 500); 6 Sep 2005 12:59:19 -0000 Delivered-To: kimberly77@example.net Received: (qmail 7767 invoked by uid 500); 6 Sep 2005 12:59:19 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 3939 invoked by uid 99); 6 Sep 2005 12:57:39 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Sep 2005 05:57:39 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO Boron.MeepZor.Com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Sep 2005 05:57:52 -0700 Received: from [83.161.120.155] (dmz-firewall [83.161.120.155]) by Boron.MeepZor.Com (8.12.8/8.12.8) with ESMTP id j86CvZhM007146; Tue, 6 Sep 2005 08:57:36 -0400 Message-ID: <kimberly77@example.net> Date: Tue, 06 Sep 2005 08:57:34 -0400 From: Bill Stoddard <kimberly77@example.net> Reply-To: kimberly77@example.net User-Agent: Mozilla Thunderbird 1.0.5 (Windows/20050711) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Geir Magnusson Jr." <kimberly77@example.net> CC: kimberly77@example.net, Justin Erenkrantz <kimberly77@example.net> Subject: Re: IDEA block cipher inclusion via the "bouncy castle" JCE provider References: <kimberly77@example.net> <kimberly77@example.net> <kimberly77@example.net> In-Reply-To: <kimberly77@example.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Geir Magnusson Jr. wrote: > Current solution I'm proposing : > > 1) We get OpenEJB to remove IDEA as a possible cipher for SSL. OpenEJB > isn't dependent on it, just lists it as a possibility if the JCE > provider has it. > > 2) We take the ASN1 code from BC (it's BSD) and use that for the ASN1 > encoding/decoding (has nothing to do w/ IDEA, but just a nice set of > utils that happen to be in the BC jar) > > At this point, openEJB has no more BC dependency. > > The remaining part is in the [optional] Geronimo console, which uses BC > to manipulate a keystore for managing digital certs. We can make that > totally optional - that we don't ship w/ BC, and show a page telling > the user the issue, what to do about it to get it to work, and a warning. > > Now it's up to the user to go off and find the BC jar and install it. > > Does that work for everyone? > > geir +1 --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Thu Sep 08 16:39:43 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 43970 invoked from network); 8 Sep 2005 16:39:42 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Sep 2005 16:39:42 -0000 Received: (qmail 56834 invoked by uid 500); 8 Sep 2005 16:39:39 -0000 Delivered-To: kimberly77@example.net Received: (qmail 56665 invoked by uid 500); 8 Sep 2005 16:39:37 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 56652 invoked by uid 99); 8 Sep 2005 16:39:37 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Sep 2005 09:39:37 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO trshare.triumf.ca) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Sep 2005 09:39:49 -0700 Received: from [83.161.120.155] (lukas.triumf.ca [83.161.120.155]) (authenticated bits=0) by trshare.triumf.ca (8.12.10/8.12.10) with ESMTP id j88GdZAG029381 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <kimberly77@example.net>; Thu, 8 Sep 2005 09:39:35 -0700 Message-ID: <kimberly77@example.net> Date: Thu, 08 Sep 2005 16:40:11 +0000 From: Lukas Theussl <kimberly77@example.net> User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.10) Gecko/20050719 Fedora/1.7.10-1.3.1 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kimberly77@example.net Subject: Copyright statement in intermediate files Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi, I would like to ask for an opinion on an issue that we have open in the Maven xdoc plugin project. The xdoc plugin generates html files from user supplied information in xml format. Some pages that are generated (the project team, mailing lists,..) use templates that contain an ASF license statement in the beginning of the file. These templates are transformed into intermediate xml files which are identical to the templates but with the user-supplied values filled in. These intermediate files are then transformed into html, but the copyright statement is not copied into the final html results. Now one user opened an issue complaining that we 'assert copyright over documents made with our system' and that this can't be right. The original issue with one comment of mine is here: http://jira.codehaus.org/browse/MPXDOC-143 So my question is whether we should be concerned about this or not. Thanks for any help, Lukas --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Fri Sep 09 02:07:01 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 42092 invoked from network); 9 Sep 2005 02:06:59 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 9 Sep 2005 02:06:59 -0000 Received: (qmail 72799 invoked by uid 500); 9 Sep 2005 02:06:54 -0000 Delivered-To: kimberly77@example.net Received: (qmail 72595 invoked by uid 500); 9 Sep 2005 02:06:53 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 72580 invoked by uid 99); 9 Sep 2005 02:06:53 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Sep 2005 19:06:53 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO f1.bali.ac) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Sep 2005 19:07:04 -0700 Received: from [83.161.120.155] ([83.161.120.155]) (authenticated bits=0) by f1.bali.ac (8.12.8/8.12.8) with ESMTP id j892Uvq8029411 for <kimberly77@example.net>; Fri, 9 Sep 2005 10:31:00 +0800 From: Niclas Hedhman <kimberly77@example.net> Organization: Independent To: kimberly77@example.net Subject: Re: Copyright statement in intermediate files Date: Fri, 9 Sep 2005 10:06:40 +0800 User-Agent: KMail/1.8 References: <kimberly77@example.net> In-Reply-To: <kimberly77@example.net> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <kimberly77@example.net> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N On Friday 09 September 2005 00:40, Lukas Theussl wrote: > Now one user opened an issue complaining that we 'assert copyright over > documents made with our system' and that this can't be right. That is correct. Examples; - The brush manufacturer, who may hold all kinds of patents and other IPs about the brush itself, can not make any claims on the painting that you produce with it/ - Microsoft can not make claims on a best-seller book, just because it was written using MS Word. Likewise, Maven should not "produce" Copyrights notices, but preferably "carry them forward" from user originals. Meaning, if copyrights are found in xdocs, then it will be good if they are copied to the html output. For generated reports, the situation is probably unclear if there can be any Copyright kimberly77@example.net. Best avenue is possibly to allow the user to provide a Copyright claim, and by that transfer the legality to the user. Cheers Niclas --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Fri Sep 09 15:18:25 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 96393 invoked from network); 9 Sep 2005 15:18:24 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 9 Sep 2005 15:18:24 -0000 Received: (qmail 75235 invoked by uid 500); 9 Sep 2005 15:18:20 -0000 Delivered-To: kimberly77@example.net Received: (qmail 74955 invoked by uid 500); 9 Sep 2005 15:18:19 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 74872 invoked by uid 99); 9 Sep 2005 15:18:18 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 08:18:18 -0700 X-ASF-Spam-Status: No, hits=0.2 required=10.0 tests=UPPERCASE_25_50 X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO ags01.agsoftware.dnsalias.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 08:18:29 -0700 Received: from [83.161.120.155] (apoyo.agsoftware.dnsalias.com [83.161.120.155]) by ags01.agsoftware.dnsalias.com (8.13.1/8.13.1) with ESMTP id j89FIDwU004703 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <kimberly77@example.net>; Fri, 9 Sep 2005 10:18:14 -0500 Message-ID: <kimberly77@example.net> Date: Fri, 09 Sep 2005 10:18:13 -0500 From: Antonio Gallardo <kimberly77@example.net> User-Agent: Mozilla Thunderbird 1.0.6-1.1.fc4 (X11/20050720) X-Accept-Language: en-us, en MIME-Version: 1.0 To: kimberly77@example.net Subject: "nuclear facility" clausule in Sun license is compatible? Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV version 0.86.2, clamav-milter version 0.86 on agssa.net X-Virus-Status: Clean X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi folks, This license is basically BSD compatible. The only difference seems to be the lastest paragraph that seems to impose a restriction. I will like to know if this license should be considered as an Apache License compatible license or not. Thanks in advance. Best Regards, Antonio Gallardo. Here is the full license text: Copyright (c) 2001-2003 Sun Microsystems, Inc. All Rights Reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: - Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. - Redistribution in binary form must reproduct the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. Neither the name of Sun Microsystems, Inc. or the names of contributors may be used to endorse or promote products derived from this software without specific prior written permission. This software is provided "AS IS," without a warranty of any kind. ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE HEREBY EXCLUDED. SUN AND ITS LICENSORS SHALL NOT BE LIABLE FOR ANY DAMAGES OR LIABILITIES SUFFERED BY LICENSEE AS A RESULT OF OR RELATING TO USE, MODIFICATION OR DISTRIBUTION OF THE SOFTWARE OR ITS DERIVATIVES. IN NO EVENT WILL SUN OR ITS LICENSORS BE LIABLE FOR ANY LOST REVENUE, PROFIT OR DATA, OR FOR DIRECT, INDIRECT, SPECIAL, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY, ARISING OUT OF THE USE OF OR INABILITY TO USE SOFTWARE, EVEN IF SUN HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. You acknowledge that Software is not designed,licensed or intended for use in the design, construction, operation or maintenance of any nuclear facility. --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Fri Sep 09 15:31:46 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 2661 invoked from network); 9 Sep 2005 15:31:38 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 9 Sep 2005 15:31:38 -0000 Received: (qmail 734 invoked by uid 500); 9 Sep 2005 15:31:35 -0000 Delivered-To: kimberly77@example.net Received: (qmail 576 invoked by uid 500); 9 Sep 2005 15:31:35 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 559 invoked by uid 99); 9 Sep 2005 15:31:34 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 08:31:34 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of kimberly77@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO nproxy.gmail.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 08:31:46 -0700 Received: by nproxy.gmail.com with SMTP id i2so344814nfe for <kimberly77@example.net>; Fri, 09 Sep 2005 08:31:31 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=CK3Mb3LhQa1udd/Eh5eFRYDvZQoUNirUGN1Qsww6Ca1lAPqKxb/f2QoKO1SXakqjq2Q++4lOQpXOMC+gQ0lUP+cI1tCgLqJmoIdB7I8Fs5TAZpDbuZmaADLgzUh7Fad+4/+bdvtmKO1w7/kIkMTvm8NiPI2A4tge+BsqjAf8eGY= Received: by 83.161.120.155 with SMTP id z16mr15002nfc; Fri, 09 Sep 2005 08:31:31 -0700 (PDT) Received: by 83.161.120.155 with HTTP; Fri, 9 Sep 2005 08:31:31 -0700 (PDT) Message-ID: <kimberly77@example.net> Date: Fri, 9 Sep 2005 16:31:31 +0100 From: sebb <kimberly77@example.net> Reply-To: kimberly77@example.net To: Antonio Gallardo <kimberly77@example.net> Subject: Re: "nuclear facility" clausule in Sun license is compatible? Cc: kimberly77@example.net In-Reply-To: <kimberly77@example.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <kimberly77@example.net> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N On 09/09/05, Antonio Gallardo <kimberly77@example.net> wrote: > Hi folks, >=20 > This license is basically BSD compatible. The only difference seems to > be the lastest paragraph that seems to impose a restriction. I will like > to know if this license should be considered as an Apache License > compatible license or not. >=20 > Thanks in advance. >=20 > Best Regards, >=20 > Antonio Gallardo. >=20 > Here is the full license text: [snip] =20 > - Redistribution in binary form must reproduct the above "reproduct" ?? > copyright notice, this list of conditions and the > following disclaimer in the documentation and/or other > materials provided with the distribution. >=20 [snip] --------------------------------------------------------------------- DISCLAIMER: Discussions on this list are informational and educational only, are not privileged and do not constitute legal advice. --------------------------------------------------------------------- To unsubscribe, e-mail: kimberly77@example.net For additional commands, e-mail: kimberly77@example.net From kimberly77@example.net Fri Sep 09 16:02:53 2005 Return-Path: <kimberly77@example.net> Delivered-To: kimberly77@example.net Received: (qmail 16483 invoked from network); 9 Sep 2005 16:02:52 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 9 Sep 2005 16:02:52 -0000 Received: (qmail 46787 invoked by uid 500); 9 Sep 2005 16:02:51 -0000 Delivered-To: kimberly77@example.net Received: (qmail 46595 invoked by uid 500); 9 Sep 2005 16:02:50 -0000 Mailing-List: contact kimberly77@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:kimberly77@example.net> List-Unsubscribe: <mailto:kimberly77@example.net> List-Post: <mailto:kimberly77@example.net> List-Id: <legal-discuss.apache.org> Delivered-To: mailing list kimberly77@example.net Received: (qmail 46582 invoked by uid 99); 9 Sep 2005 16:02:50 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 09:02:50 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO ags01.agsoftware.dnsalias.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 09 Sep 2005 09:03:02 -0700 Received: from [83.161.120.155] (apoyo.agsoftware.dnsalias.com [83.161.120.155]) by ags01.agsoftware.dnsalias.com (8.13.1/8.13.1) with ESMTP id j89G2iIS005845 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <kimberly77@example.net>; Fri, 9 Sep 2005 11:02:47 -0500 Message-ID: <kimberly77@example.net> Date: Fri, 09 Sep 2005 11:02:44 -0500 From: Antonio Gallardo <kimberly77@example.net> User-Agent: Mozilla Thunderbird 1.0.6-1.1.fc4 (X11/20050720) X-Accept-Language: en-us, en MIME-Version: 1.0 To: kimberly77@example.net Subject: Re: "nuclear facility" clausule in Sun license is compatible? References: <kimberly77@example.net> <kimberly77@example.net> In-Reply-To: <kimberly77@example.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV version 0.86.2, clamav-milter version 0.86 on agssa.net X-Virus-Status: Clean X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi sebb: Thanks for your answer! sebb wrote: >On 09/09/05, Antonio Gallardo <kimberly77@example.net> wrote: > > >>Hi folks, >> >>This license is basically BSD compatible. The only difference seems to >>be the lastest paragraph that seems to impose a restriction. I will like >>to know if this license should be considered as an Apache License >>compatible license or not. >> >>Thanks in advance. >> >>Best Regards, >> >>Antonio Gallardo. >> >>Here is the full license text: >> >> > >[snip] > > > >>- Redistribution in binary form must reproduct the above >> >> > >"reproduct" ?? > > Yep. I just did a "copy&paste". The word is part of the license. I cannot find the word in english dictionary: http://dictionary.reference.com/search?q=reproduct IANAL. I believe they mean something like: reproduced: http://dictionary.reference.com/search?r=2&q=reproduced Best Regards, Antonio Gallardo. ---------------------------------------------------------------------
{'source': 'Apache Software Foundation Public Mail Archives'}