[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: LGPL library using only LGPL-parts of partially GPL shared library (
Re: LGPL library using only LGPL-parts of partially GPL shared library (gnutls, nettle)
Sun, 20 Feb 2011 11:23:37 +0100
On 2011-02-20 Simon Josefsson <address@hidden> wrote:
> The Blowfish code in Nettle has already been re-implemented under
> LGPLv2+ but not released yet. I am working on re-implementing Serpent
> under LGPLv2+, however there are multiple and incompatible test vectors
> of Serpent and it is not clear which corresponds to the "real" Serpent.
> Meanwhile, perhaps the Nettle package in Debian could disable Serpent
> and Blowfish, or since the Blowfish re-write mostly re-established
> LGPLv2+ as the license of the old code, at least disable Serpent?
That would break the ABI and require a soname change, afaiui.
I have the feeling that the discussion I started is an academic one
anyway. Nettle's public key library (libhogweed) uses and links against
libgmp, which is LGPLv3+. Therefore switching gnutls from gcrypt to
nettle would break GPLv2-compatibility (GPLv2 without the "or any
later version " clause). Oh dear.
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'