You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tika.apache.org by "Bertrand Delacretaz (JIRA)" <ji...@apache.org> on 2008/01/22 12:14:42 UTC
[jira] Created: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Bouncycastle binaries requires US exports regulation compliance
---------------------------------------------------------------
Key: TIKA-118
URL: https://issues.apache.org/jira/browse/TIKA-118
Project: Tika
Issue Type: Task
Affects Versions: 0.2-incubating
Reporter: Bertrand Delacretaz
Fix For: 0.2-incubating
See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Posted by "Hoss Man (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TIKA-118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12580151#action_12580151 ]
Hoss Man commented on TIKA-118:
-------------------------------
Got it ... thanx for clarifying.
> Bouncycastle binaries requires US exports regulation compliance
> ---------------------------------------------------------------
>
> Key: TIKA-118
> URL: https://issues.apache.org/jira/browse/TIKA-118
> Project: Tika
> Issue Type: Task
> Affects Versions: 0.2-incubating
> Reporter: Bertrand Delacretaz
> Assignee: Jukka Zitting
> Fix For: 0.2-incubating
>
>
> See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Posted by "Hoss Man (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TIKA-118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12580143#action_12580143 ]
Hoss Man commented on TIKA-118:
-------------------------------
in light of this thread on legal-discuss...
http://markmail.org/message/jduwmahz7nfcrzw6
...does Tika really need a crypto notice? Is Tika's use of PDFBox really any different then Jackrabbit's?
My understanding from reading that thread is that as long as Tika (or any Project "X") does not contain any code to specifically use PDFBox for the purpose of encryption, then X doesn't need a crypto notice -- even if PDFBox is included in distributions of X. The only reason X would need a crypto notice for using PDFBox is if it directly includes the BouncyCastle libraries in it's distributions.
correct?
> Bouncycastle binaries requires US exports regulation compliance
> ---------------------------------------------------------------
>
> Key: TIKA-118
> URL: https://issues.apache.org/jira/browse/TIKA-118
> Project: Tika
> Issue Type: Task
> Affects Versions: 0.2-incubating
> Reporter: Bertrand Delacretaz
> Assignee: Jukka Zitting
> Fix For: 0.2-incubating
>
>
> See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Posted by "Chris A. Mattmann (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TIKA-118?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chris A. Mattmann updated TIKA-118:
-----------------------------------
Component/s: documentation
> Bouncycastle binaries requires US exports regulation compliance
> ---------------------------------------------------------------
>
> Key: TIKA-118
> URL: https://issues.apache.org/jira/browse/TIKA-118
> Project: Tika
> Issue Type: Task
> Components: documentation
> Affects Versions: 0.2-incubating
> Reporter: Bertrand Delacretaz
> Assignee: Jukka Zitting
> Fix For: 0.2-incubating
>
>
> See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Posted by "Jukka Zitting (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TIKA-118?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jukka Zitting reassigned TIKA-118:
----------------------------------
Assignee: Jukka Zitting
> Bouncycastle binaries requires US exports regulation compliance
> ---------------------------------------------------------------
>
> Key: TIKA-118
> URL: https://issues.apache.org/jira/browse/TIKA-118
> Project: Tika
> Issue Type: Task
> Affects Versions: 0.2-incubating
> Reporter: Bertrand Delacretaz
> Assignee: Jukka Zitting
> Fix For: 0.2-incubating
>
>
> See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Posted by "Jukka Zitting (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TIKA-118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12562822#action_12562822 ]
Jukka Zitting commented on TIKA-118:
------------------------------------
The "Handling Cryptography within an Apache Release" guide (http://www.apache.org/dev/crypto.html) lists the following four steps to satisfy the export control requirements:
1. Check the Export Control Classification Number (ECCN).
2. Update the Exports Page with Source Links.
3. Notify the U.S. Government of the new code.
4. Inform users with a crypto notice in the distribution's README and download pages.
I have completed these steps as follows:
1. Apache Tika is designed (through PDFBox) to use the Bouncy Castle (another ECCN 5D002 product) libraries for extracting text content and metadata from encrypted PDF documents. Thus the cryptographic functionality meets the definition of ECCN 5D002.
2. Apache Tika is listed in http://www.apache.org/licenses/exports/
3. The U.S. Government has been notified (cc tika-dev@, see http://markmail.org/message/fwzekguknsg4tgfh)
4. I've updated the README file with the crypto notice (see http://svn.apache.org/viewvc?view=rev&revision=615409)
The only thing still missing is to add the crypto notice also to a Tika download page for the upcoming 0.2-incubating release.
> Bouncycastle binaries requires US exports regulation compliance
> ---------------------------------------------------------------
>
> Key: TIKA-118
> URL: https://issues.apache.org/jira/browse/TIKA-118
> Project: Tika
> Issue Type: Task
> Affects Versions: 0.2-incubating
> Reporter: Bertrand Delacretaz
> Assignee: Jukka Zitting
> Fix For: 0.2-incubating
>
>
> See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Posted by "Jukka Zitting (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TIKA-118?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jukka Zitting resolved TIKA-118.
--------------------------------
Resolution: Fixed
Now we also have a download page with the required export control notice.
Resolving as Fixed.
> Bouncycastle binaries requires US exports regulation compliance
> ---------------------------------------------------------------
>
> Key: TIKA-118
> URL: https://issues.apache.org/jira/browse/TIKA-118
> Project: Tika
> Issue Type: Task
> Components: documentation
> Affects Versions: 0.2-incubating
> Reporter: Bertrand Delacretaz
> Assignee: Jukka Zitting
> Fix For: 0.2-incubating
>
>
> See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (TIKA-118) Bouncycastle binaries requires US
exports regulation compliance
Posted by "Jukka Zitting (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TIKA-118?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12580147#action_12580147 ]
Jukka Zitting commented on TIKA-118:
------------------------------------
Unlike Jackrabbit, we do bundle the Bouncy Castle libraries (at least with current TIKA-115 implementation) and have the following code snippet:
if (pdfDocument.isEncrypted()) {
try {
pdfDocument.decrypt("");
} catch (Exception e) {
// Ignore
}
}
I'm wondering if the export control stuff would be troublesome for some downstream users. If yes, then we probably should produce alternative builds with and without crypto code. Alternatively we could debate whether it might be easier to just drop all the crypto dependencies and functionality.
> Bouncycastle binaries requires US exports regulation compliance
> ---------------------------------------------------------------
>
> Key: TIKA-118
> URL: https://issues.apache.org/jira/browse/TIKA-118
> Project: Tika
> Issue Type: Task
> Affects Versions: 0.2-incubating
> Reporter: Bertrand Delacretaz
> Assignee: Jukka Zitting
> Fix For: 0.2-incubating
>
>
> See http://markmail.org/message/jduwmahz7nfcrzw6 , we need to take care of some US export regulations paperworks before shipping the binary package created in TIKA-115.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.