[jira] Commented: (FOR-1069) add notices for US cryptographic export laws

["Tim Williams (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FOR-1069?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12868059#action_12868059 ] 

Tim Williams commented on FOR-1069:
-----------------------------------

I've run:
../committers/tools/report_crypto_jars.pl | grep matches

and didn't come up with anything particularly interesting beyond the jsch.   The following packages also came up but some googling didn't turn up any immediate concerns.  I've removed any Apache packages since, I think, they'd be covered under the same ECCN anyway... 


Binary file ./org/mortbay/http/handler/HTAccessHandler$HTAccess.class matches
Binary file ./org/mortbay/util/Credential$Crypt.class matches
Binary file ./org/mortbay/util/Credential.class matches
Binary file ./org/mortbay/util/Password.class matches
Binary file ./org/mortbay/util/UnixCrypt.class matches

Binary file ./com/opensymphony/module/random/Rijndael.class matches
Binary file ./com/opensymphony/module/random/Rijndael_Algorithm.class matches
Binary file ./com/opensymphony/user/adapter/jrun/JRunUserManager.class matches

Binary file ./org/mortbay/http/handler/HTAccessHandler$HTAccess.class matches
Binary file ./org/mortbay/util/Credential$Crypt.class matches
Binary file ./org/mortbay/util/Credential.class matches
Binary file ./org/mortbay/util/Password.class matches
Binary file ./org/mortbay/util/UnixCrypt.class matches

Binary file ./fr/jayasoft/ivy/util/EncrytedProperties.class matches
Binary file ./fr/jayasoft/ivy/util/StringUtils.class matches

Binary file ./org/hsqldb/Server.class matches

Were these ruled out as non-concerns last time?


> add notices for US cryptographic export laws
> --------------------------------------------
>
>                 Key: FOR-1069
>                 URL: https://issues.apache.org/jira/browse/FOR-1069
>             Project: Forrest
>          Issue Type: Task
>          Components: Project administration
>            Reporter: David Crossley
>             Fix For: 0.9-dev
>
>
> We need to investigate our SVN and add crypto notices as explained at http://www.apache.org/licenses/exports/ and the legal-discuss mail list.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Re: (FOR-1069) add notices for US cryptographic export laws

[David Crossley <cr...@apache.org>]

Tim, it is great that you are helping to follow-up on the ECCN issue.

My mind has gone all rusty on this topic. I also struggled at the time
to understand and deal with the job. So i am having trouble answering
your FOR-1069 comments.

I suppose that we make the task more complex because we bundle
these supporting products.

No time available at the moment, but i wonder if i try to
refresh my understanding sometime next week. Then, while it is
still fresh for you, we talk on Skype to resolve it.

At one stage Bill Rowe offered to help.
2008-02-21 to board and Cc forrest-private: ECCN Forrest

-David