You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@lenya.apache.org by Christian Egli <ch...@wyona.net> on 2004/01/21 14:09:41 UTC
License check
Before the 1.2 release I would like to do one final license check,
i.e. check if all the jars that we ship have a associated license file
and ensure that this license allows for redistribution.
I did the check previously for all the jars in the lib dir. However I
have not done this for the following jars:
* lib/w3c-crypt.jar
* all the jars in src/webapp/lenya/pubs/docs-new/WEB-INF/lib (these
are basically all the jars that come with forrest)
* all the jars in src/templates/forrest/lib (excalibur and jakarta,
jing and forrest should be covered by existing license files. Neko*
needs to be checked).
* two jars in tools/jetty/lib (jetty-4.2.9.jar and servlet-2.3.jar)
Any thoughts, additional information?
--
Christian Egli christian.egli@wyona.com +41 1 272 9161
Wyona AG, Hardstrasse 219, CH-8005 Zurich
Open Source CMS http://www.wyona.org http://www.wyona.com
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Michael Wechner <mi...@wyona.com>.
Christian Egli wrote:
>
>What is not very nice is that the jar contains a java source file
>where we added the apache license header. Should maybe be
>changed.
>
the reason for having the source is that the class has been
patched. The same is true for Lexus (XUpdate).
Michi
> Other than that now that the license is included we should be
>fine.
>
>Christian
>
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
>For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Christian Egli <eg...@wyona.com>.
Michael Wechner <mi...@wyona.com> writes:
> Stefano Mazzocchi wrote:
>
> >
> >> I did the check previously for all the jars in the lib dir. However I
> >> have not done this for the following jars:
> >>
> >> * lib/w3c-crypt.jar
> >
>
> Probably yes, but I need to familiarise first with
>
> http://java.sun.com/j2se/1.4.1/docs/api/javax/crypto/package-summary.html
>
> It's just the Md5 which we would need to replace
>
> Any more specific pointers welcome
For release 1.2 I'd say we stick with what we have. I uncovered a
licence file for the w3c-crypt.jar and included it in the legal
dir. It allows for modification and redistribution.
What is not very nice is that the jar contains a java source file
where we added the apache license header. Should maybe be
changed. Other than that now that the license is included we should be
fine.
Christian
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Michael Wechner <mi...@wyona.com>.
Stefano Mazzocchi wrote:
>
>
> import java.security.MessageDigest;
>
> public static byte[] getMD5(byte[] buffer) {
> MessageDigest md5 = MessageDigest.getInstance("MD5");
> return md5.digest(buffer);
> }
thanks very much for the hint. I replaced the w3c class within
src/java/org/apache/lenya/ac/Password.java
and removed the w3c library and license file
Michi
>
>
> which is probably a lot easier ;-)
>
> --
> Stefano.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
> For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Stefano Mazzocchi <st...@apache.org>.
On 23 Jan 2004, at 12:05, Michael Wechner wrote:
> Stefano Mazzocchi wrote:
>
>>
>>> o/package- summary.html
>>>
>>> It's just the Md5 which we would need to replace
>>
>>
>> I wrote an MD5 class loooooooooong ago for jserv, it's probably still
>> there and it's Apache licensed.
>
>
> ok. In here
>
> http://archive.apache.org/dist/java/jserv/
>
> ?
yes, but FYI, in java you can do
import java.security.MessageDigest;
public static byte[] getMD5(byte[] buffer) {
MessageDigest md5 = MessageDigest.getInstance("MD5");
return md5.digest(buffer);
}
which is probably a lot easier ;-)
--
Stefano.
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Michael Wechner <mi...@wyona.com>.
Stefano Mazzocchi wrote:
>
>> o/package- summary.html
>>
>> It's just the Md5 which we would need to replace
>
>
> I wrote an MD5 class loooooooooong ago for jserv, it's probably still
> there and it's Apache licensed.
ok. In here
http://archive.apache.org/dist/java/jserv/
?
Michi
>
>
> --
> Stefano.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
> For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Stefano Mazzocchi <st...@apache.org>.
On 23 Jan 2004, at 08:32, Michael Wechner wrote:
> Stefano Mazzocchi wrote:
>
>>
>>> I did the check previously for all the jars in the lib dir. However I
>>> have not done this for the following jars:
>>>
>>> * lib/w3c-crypt.jar
>>
>
> Probably yes, but I need to familiarise first with
>
> http://java.sun.com/j2se/1.4.1/docs/api/javax/crypto/package-
> summary.html
>
> It's just the Md5 which we would need to replace
I wrote an MD5 class loooooooooong ago for jserv, it's probably still
there and it's Apache licensed.
--
Stefano.
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Michael Wechner <mi...@wyona.com>.
Stefano Mazzocchi wrote:
>
>> I did the check previously for all the jars in the lib dir. However I
>> have not done this for the following jars:
>>
>> * lib/w3c-crypt.jar
>
Probably yes, but I need to familiarise first with
http://java.sun.com/j2se/1.4.1/docs/api/javax/crypto/package-summary.html
It's just the Md5 which we would need to replace
Any more specific pointers welcome
Michi
>>
>
> why do you need this? can't you use the crypto classes that come with
> java?
>
>> * all the jars in src/webapp/lenya/pubs/docs-new/WEB-INF/lib (these
>> are basically all the jars that come with forrest)
>
>
> those were already screened, but you need to copy the licenses from
> /forrest/legal in your legal directory as well.
>
>> * all the jars in src/templates/forrest/lib (excalibur and jakarta,
>> jing and forrest should be covered by existing license files. Neko*
>> needs to be checked).
>
>
> Neko* are all under the Apache license.
>
>> * two jars in tools/jetty/lib (jetty-4.2.9.jar and servlet-2.3.jar)
>
>
> jetty is distributable (copy the license from the cocoon /legal
> folder), servlet-2.3.jar is the one that comes with tomcat and
> distributed under the apache license.
>
>> Any thoughts, additional information?
>
>
> Remember to give proper credit in the distribution. Cocoon does so in
> the CREDITS.txt file in its cvs module. I suggest you follow the same
> approach.
>
> --
> Stefano.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
> For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Christian Egli <eg...@wyona.com>.
Stefano Mazzocchi <st...@apache.org> writes:
> > * all the jars in src/webapp/lenya/pubs/docs-new/WEB-INF/lib (these
> > are basically all the jars that come with forrest)
>
> those were already screened, but you need to copy the licenses from
> /forrest/legal in your legal directory as well.
Ok, I copied all license files that were missing over into ./legal. Done.
> > * all the jars in src/templates/forrest/lib (excalibur and jakarta,
> > jing and forrest should be covered by existing license files. Neko*
> > needs to be checked).
>
> Neko* are all under the Apache license.
Ok, so we're covered. Done.
> > * two jars in tools/jetty/lib (jetty-4.2.9.jar and servlet-2.3.jar)
>
> jetty is distributable (copy the license from the cocoon /legal
> folder), servlet-2.3.jar is the one that comes with tomcat and
> distributed under the apache license.
The jetty license file was already in ./legal and I copied
LICENCE.servlet from forrest. I take it that covers servlet-2.3.jar.
> > Any thoughts, additional information?
>
> Remember to give proper credit in the distribution. Cocoon does so in
> the CREDITS.txt file in its cvs module. I suggest you follow the same
> approach.
Yup. I added a CREDITS.txt file.
Christian
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Stefano Mazzocchi <st...@apache.org>.
On 21 Jan 2004, at 14:09, Christian Egli wrote:
>
> Before the 1.2 release I would like to do one final license check,
> i.e. check if all the jars that we ship have a associated license file
> and ensure that this license allows for redistribution.
ok
> I did the check previously for all the jars in the lib dir. However I
> have not done this for the following jars:
>
> * lib/w3c-crypt.jar
why do you need this? can't you use the crypto classes that come with
java?
> * all the jars in src/webapp/lenya/pubs/docs-new/WEB-INF/lib (these
> are basically all the jars that come with forrest)
those were already screened, but you need to copy the licenses from
/forrest/legal in your legal directory as well.
> * all the jars in src/templates/forrest/lib (excalibur and jakarta,
> jing and forrest should be covered by existing license files. Neko*
> needs to be checked).
Neko* are all under the Apache license.
> * two jars in tools/jetty/lib (jetty-4.2.9.jar and servlet-2.3.jar)
jetty is distributable (copy the license from the cocoon /legal
folder), servlet-2.3.jar is the one that comes with tomcat and
distributed under the apache license.
> Any thoughts, additional information?
Remember to give proper credit in the distribution. Cocoon does so in
the CREDITS.txt file in its cvs module. I suggest you follow the same
approach.
--
Stefano.
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Stefano Mazzocchi <st...@apache.org>.
On 25 Jan 2004, at 08:27, Christian Egli wrote:
> Christian Egli <ch...@wyona.net> writes:
>
>> Before the 1.2 release I would like to do one final license check,
>> i.e. check if all the jars that we ship have a associated license file
>> and ensure that this license allows for redistribution.
>>
>> I did the check previously for all the jars in the lib dir. However I
>> have not done this for the following jars:
>>
>> * lib/w3c-crypt.jar
>>
>> * all the jars in src/webapp/lenya/pubs/docs-new/WEB-INF/lib (these
>> are basically all the jars that come with forrest)
>>
>> * all the jars in src/templates/forrest/lib (excalibur and jakarta,
>> jing and forrest should be covered by existing license files. Neko*
>> needs to be checked).
>>
>> * two jars in tools/jetty/lib (jetty-4.2.9.jar and servlet-2.3.jar)
>
> All covered now. Should be ready for release license wise.
I'll check this later today and give my final ack.
--
Stefano.
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org
Re: License check
Posted by Christian Egli <eg...@wyona.com>.
Christian Egli <ch...@wyona.net> writes:
> Before the 1.2 release I would like to do one final license check,
> i.e. check if all the jars that we ship have a associated license file
> and ensure that this license allows for redistribution.
>
> I did the check previously for all the jars in the lib dir. However I
> have not done this for the following jars:
>
> * lib/w3c-crypt.jar
>
> * all the jars in src/webapp/lenya/pubs/docs-new/WEB-INF/lib (these
> are basically all the jars that come with forrest)
>
> * all the jars in src/templates/forrest/lib (excalibur and jakarta,
> jing and forrest should be covered by existing license files. Neko*
> needs to be checked).
>
> * two jars in tools/jetty/lib (jetty-4.2.9.jar and servlet-2.3.jar)
All covered now. Should be ready for release license wise.
Christian
---------------------------------------------------------------------
To unsubscribe, e-mail: lenya-dev-unsubscribe@cocoon.apache.org
For additional commands, e-mail: lenya-dev-help@cocoon.apache.org