You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@turbine.apache.org by se...@apache.org on 2008/04/12 16:33:34 UTC
svn commit: r647456 - in /turbine/site/xdocs: board-reports.xml
reports/report-2008-02.xml
Author: seade
Date: Sat Apr 12 07:33:33 2008
New Revision: 647456
URL: http://svn.apache.org/viewvc?rev=647456&view=rev
Log:
Move Feb '08 report from wiki.
Added:
turbine/site/xdocs/reports/report-2008-02.xml
Modified:
turbine/site/xdocs/board-reports.xml
Modified: turbine/site/xdocs/board-reports.xml
URL: http://svn.apache.org/viewvc/turbine/site/xdocs/board-reports.xml?rev=647456&r1=647455&r2=647456&view=diff
==============================================================================
--- turbine/site/xdocs/board-reports.xml (original)
+++ turbine/site/xdocs/board-reports.xml Sat Apr 12 07:33:33 2008
@@ -42,7 +42,7 @@
<li><a href="reports/report-2007-07.html">July 2007 Report</a></li>
<li><a href="reports/report-2007-08.html">August 2007 Report</a></li>
<li><a href="reports/report-2007-11.html">November 2007 Report</a></li>
-<!--<li><a href="reports/report-2008-02.html">February 2008 Report</a></li>-->
+<li><a href="reports/report-2008-02.html">February 2008 Report</a></li>
<!--<li><a href="reports/report-2008-05.html">May 2008 Report</a></li>-->
</ul>
Added: turbine/site/xdocs/reports/report-2008-02.xml
URL: http://svn.apache.org/viewvc/turbine/site/xdocs/reports/report-2008-02.xml?rev=647456&view=auto
==============================================================================
--- turbine/site/xdocs/reports/report-2008-02.xml (added)
+++ turbine/site/xdocs/reports/report-2008-02.xml Sat Apr 12 07:33:33 2008
@@ -0,0 +1,123 @@
+<?xml version="1.0"?>
+
+<!--
+ Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+
+<document>
+
+<properties>
+ <title>Board Report February 2008</title>
+ <author email="seade@backstagetech.com.au">Scott Eade</author>
+</properties>
+
+<body>
+
+<section name="Apache Turbine Project Board Report, February 2008">
+
+<subsection name="Status">
+
+<p>There has been good progress towards resolving the outstanding ECCN issues
+ within the Turbine project. See below for details.</p>
+<p>The final tasks relating to Turbine becoming a TLP have finally been
+ completed - the mirrored downloads and archived releases have been moved from
+ jakarta to turbine directories.</p>
+<p>Other than this the Turbine project continues on with a fairly low level of
+ activity.</p>
+<p>The Turbine project has no board-level issues at this time.</p>
+
+</subsection>
+
+<subsection name="ECCN Status and activity">
+
+<p>While this issue has been highlighted by Bill for the current round of
+ reports, it has been on our radar for some time now.</p>
+<p>The following areas had the potential to require ECCN registration due to
+ their use of a "symmetric algorithm employing a key length exceeding 56 bits"
+ and/or because they "were designed to work with strong cryptographic
+ libraries":</p>
+<ol>
+ <li>fulcrum-crypto - used the cryptix library to implement Unix crypt()</li>
+ <li>The Crypto Service in Turbine Core, from which fulcrum-crypto was
+ extracted - also used the cryptix library</li>
+ <li>fulcrum-yaafi - supports decryption of strongly encrypted configuration
+ files</li>
+ <li>fulcrum-pbe - supports strong encryption/decryption of files</li>
+</ol>
+<p>In particular, the following actions have taken place:</p>
+<ul>
+ <li>the cryptix dependency has been removed from fulcrum-crypto and Turbine
+ core's Crypto Service (replaced with
+ org.apache.jetspeed.services.security.ldap.UnixCrypt from the JetSpeed Portal
+ project).</li>
+ <li>the exposed interfaces and underlying implementation of fulcrum-yaafi and
+ fulcrum-pbe have been modified to ensure that only DES (56 bit key length)
+ can be used (strong encryption was never used but was available through the
+ exposed interfaces).</li>
+</ul>
+<p>It is our understanding that after our next release of the following
+ components, no aspects of the Apache Turbine project will require ECCN
+ registration:</p>
+<ul>
+ <li>fulcrum-crypto-1.0.7 - ETA some time in the next few weeks</li>
+ <li>turbine-2.3.3 - ETA some time in the next month or so</li>
+ <li>fulcrum-yaafi-1.0.6 - ETA some time in the next few weeks</li>
+ <li>fulcrum-pbe-1.0.0 - Not yet a released component so no release required in
+ order to comply.</li>
+</ul>
+
+</subsection>
+
+<subsection name="Community changes">
+
+<p>No new committers were voted in since the last board report.</p>
+<p>No new PMC members were voted in since the last board report.</p>
+
+</subsection>
+
+<subsection name="Turbine core project">
+
+<p>The Turbine Core trunk and turbine-site modules have been updated to ASL 2.0
+ - this was long overdue and is in preparation for a future release.</p>
+<p>The changes to fulcrum-crypto have been backported to the Crypto Service so
+ as to eliminate the ECCN registration requirement for Turbine core.</p>
+<p>We are working on releasing Turbine 2.3.3 - this has primarily been waiting
+ on the DB Project's Torque 3.3 release which is likely to appear in the next
+ couple of weeks.</p>
+<p>No beta or final releases were made since the last board report.</p>
+
+</subsection>
+
+<subsection name="Fulcrum component project">
+
+<p>Mostly ECCN related activity, but progress on migrating from Maven 1.x to
+ Maven 2.x for project builds has commenced.</p>
+<p>No beta or final releases were made since the last board report.</p>
+
+</subsection>
+
+<subsection name="META project">
+
+<p>No beta or final releases were made since the last board report.</p>
+
+</subsection>
+
+</section>
+
+</body>
+</document>