Re: octave license is incompatible with openssl

[Alex Vong]

Ricardo Wurmus <address@hidden> writes:

> Alex Vong <address@hidden> writes:
>
>> I notice 'octave 4.0.2' has 'address@hidden' as one of its inputs. As
>> far as I know, gplv3 is incompatible with openssl license
>> (https://people.gnome.org/~markmc/openssl-and-the-gpl.html).
>
> Looks like you’re right.  Other projects add a special openSSL linking
> exception, but Octave does not seem to account for this.
>
>> How should we fix this?
>
> It seems that the use of openssl in Octave is optional, so we could
> probably just remove it.  From a cursory look it appears that it is used
> for not much more than the MD5 algorithm.  Would you like to submit a
> patch that removes openssl from the inputs?
>
Here it is. It takes a long time to track down that curl is pulling the
openssl depedency. I also upgrade octave to 4.0.3 and change to use
'tar.xz'.

> It would be good to ask the Octave project if it would be possible to
> replace OpenSSL with, say, GnuTLS.
>
I agree, should we CC/forward this discussion to octave-devel list?

> ~~ Ricardo

Cheers,
Alex

>From f813b22539c6cefd49471f7df3adc4b02ebcd76c Mon Sep 17 00:00:00 2001
From: Alex Vong <address@hidden>
Date: Sat, 6 Aug 2016 08:52:34 +0800
Subject: [PATCH] gnu: octave: Update to 4.0.3.

  * gnu/packages/maths.scm (octave): Update to 4.0.3.
  [source]: Change to '.tar.xz'.
  [inputs]: Remove dependencies on openssl and curl.
---
 gnu/packages/maths.scm | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/gnu/packages/maths.scm b/gnu/packages/maths.scm
index fcea0bc..149c533 100644
--- a/gnu/packages/maths.scm
+++ b/gnu/packages/maths.scm
@@ -692,16 +692,19 @@ can solve two kinds of problems:
 (define-public octave
   (package
     (name "octave")
-    (version "4.0.2")
+    (version "4.0.3")
     (source
      (origin
       (method url-fetch)
       (uri (string-append "mirror://gnu/octave/octave-"
-                          version ".tar.gz"))
+                          version ".tar.xz"))
       (sha256
        (base32
-        "1hdxap3j88rpqjimnfhinym6z73wdi5dfa6fv85c13r1dk9qzk9r"))))
+        "11day29k4yfvxh4101x5yf26ld992x5n6qvmhjjk6mzsd26fqayw"))))
     (build-system gnu-build-system)
+    ;; Ideally, curl should be in the list of inputs to enable ftp support.
+    ;; It isn't because it causes octave to link against openssl which isn't 
allowed
+    ;; as octave's license has no openssl exception at the moment.
     (inputs
      `(("lapack" ,lapack)
        ("readline" ,readline)
@@ -709,7 +712,6 @@ can solve two kinds of problems:
        ("fftw" ,fftw)
        ("fftwf" ,fftwf)
        ("arpack" ,arpack-ng)
-       ("curl" ,curl)
        ("pcre" ,pcre)
        ("cyrus-sasl" ,cyrus-sasl)
        ("fltk" ,fltk)
@@ -719,7 +721,6 @@ can solve two kinds of problems:
        ("libxft" ,libxft)
        ("mesa" ,mesa)
        ("glu" ,glu)
-       ("openssl" ,openssl)
        ("zlib" ,zlib)))
     (native-inputs
      `(("gfortran" ,gfortran)
-- 
2.9.2