You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@poi.apache.org by Dave Fisher <da...@jmlafferty.com> on 2009/10/15 23:59:58 UTC
Re: Recent additions to POI "Added implementation of Digital Signature support"
Hi Josh,
This valuable contribution needs to wait for proper clarification of
the dual-license for the feDict OOXML signer piece.
Let's wait to put it back until that is done.
Best Regards,
Dave
> I just reverted this new stuff:
> http://svn.apache.org/viewvc?view=rev&revision=825637
>
> This is not because of the concerns raised in the thread so far, but
> because the GUMP build seems to have been broken since r824836. This
> is a little confusing, because the Ant build has been working locally
> OK for me (after the fixes of r824963). I tried to troubleshoot the
> GUMP build results, but it is not obvious to me why the ooxml compile
> classpath seems to be missing several of the newly required jars of
> r824836.
>
> I apologise if I have reverted this without good cause. Up until now
> I have actually been trying to clean up this new code (reducing
> dependency drag-in).
>
> regards,
> Josh
>
> attached below is a comparison of SVN and GUMP logs.
> -----------------------------------------------------
>
> This is what I currently read at
> http://vmgump.apache.org/gump/public/poi/poi/index.html :
> ...
> Name State Start Elapsed
> build_poi_poi Failed Thu, 15 Oct 2009 07:39:05 (PDT) 2 mins 32 secs
> ...
> Current State: Failed
> Duration in state: 3
> Start of state: 2009-10-13T16:00:05
> Previous State: 2
> First Success: 2007-06-01T00:00:15
> Last Success: 2009-10-13T00:00:05
> -- --
>
> SVN log shows the following recent changes:
>
> r825294 | josh | 2009-10-14 14:32:06 -0700 | removed new dependency
> on joda
> r824972 | josh | 2009-10-13 16:24:14 -0700 | Bugzilla 47969 -
> improvements to equals() methods
> r824963 | josh | 2009-10-13 15:42:58 -0700 | Fixes for compiler errors
> and junit failures introduced by r824836
> r824836 | ugo | 2009-10-13 09:31:28 -0700 | Added implementation of
> Digital Signature ...
> r823348 | josh | 2009-10-08 15:29:41 -0700 | Bugzilla 47962 - Fixed
> some potential NPEs...
> -- --
>
> GUMP is not clear about the timezone of its timestamps but it seems
> likely that the 'Last Success' was before r824836.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
> For additional commands, e-mail: dev-help@poi.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org
Re: Recent additions to POI "Added implementation of Digital Signature support"
Posted by David Fisher <df...@jmlafferty.com>.
Hi Ugo,
> I'm OK with waiting and discussing a bit. In any case, the README.txt
> has now been modified to read as follows
> <http://code.google.com/p/eid-applet/source/browse/trunk/README.txt?spec=svn213&r=213
> >:
>
> "The source code of the eID Applet Project is licensed under GNU
> LGPL v3.0.
> Part of the source code (OOXML signature code) is dual-licensed
> under both
> the GNU LGPL v3.0 and the Apache License v2.0. Only the files with a
> header
> containing both the GNU LGPL v3.0 and Apache License v2.0 license
> texts are
> dual-licensed. The dual-licensing was offered in response to a
> request from
> the Apache POI open source project. All other source code files
> remain under
> control of the GNU LGPL v3.0 license unless otherwise decided in the
> future
> by _ALL_ eID Applet Project copyright holders."
This is a good clarification to a point. I am not sure if it is
sufficient. It makes me wonder who _ALL_ the copyright holders are. I
assume that the files dual licensed are all FedICT's which is Belgium
Federal Government (and EU?)
Here is what is currently in the NOTICE:
> This product contains parts that were originally based on the eID
> Applet project (http://code.google.com/p/eid-applet/). Copyright (C)
> 2008-2009 FedICT.
Here is a suggestion:
This product contains an ASLv2 licensed version of the OOXML signer
package from the eID Applet project (http://code.google.com/p/eid-applet/source/browse/trunk/README.txt
) Copyright (C) 2008-2009 FedICT.
I think that no matter what phrasing is used we should make sure that
legal@apache approves. I wonder if they will want a CCLA from FedICT.
Regards,
Dave
>
> Ugo
>
> --
> Ugo Cei
> Sourcesense - making sense of Open Source: http://www.sourcesense.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
> For additional commands, e-mail: dev-help@poi.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org
Re: Recent additions to POI "Added implementation of Digital
Signature support"
Posted by Ugo Cei <u....@sourcesense.com>.
On Thu, Oct 15, 2009 at 11:59 PM, Dave Fisher <da...@jmlafferty.com> wrote:
> Hi Josh,
>
> This valuable contribution needs to wait for proper clarification of the
> dual-license for the feDict OOXML signer piece.
>
> Let's wait to put it back until that is done.
I'm OK with waiting and discussing a bit. In any case, the README.txt
has now been modified to read as follows
<http://code.google.com/p/eid-applet/source/browse/trunk/README.txt?spec=svn213&r=213>:
"The source code of the eID Applet Project is licensed under GNU LGPL v3.0.
Part of the source code (OOXML signature code) is dual-licensed under both
the GNU LGPL v3.0 and the Apache License v2.0. Only the files with a header
containing both the GNU LGPL v3.0 and Apache License v2.0 license texts are
dual-licensed. The dual-licensing was offered in response to a request from
the Apache POI open source project. All other source code files remain under
control of the GNU LGPL v3.0 license unless otherwise decided in the future
by _ALL_ eID Applet Project copyright holders."
Ugo
--
Ugo Cei
Sourcesense - making sense of Open Source: http://www.sourcesense.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@poi.apache.org
For additional commands, e-mail: dev-help@poi.apache.org