You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@activemq.apache.org by Christopher Shannon <ch...@gmail.com> on 2015/08/18 17:57:31 UTC
[DISCUSS] Jetty 9.2 dependency licensing issues
I'm working on upgrading to Jetty 9.2.x to fix:
https://issues.apache.org/jira/browse/AMQ-5356
Part of the upgrade requires updating dependencies for the servlet and jsp
jars. Jetty has two different versions of jsp implementations it is
supposed to work. The jetty-jsp works fine but I'm not sure if the
dependencies are compatible with Apache licensing. Supposedly Jetty also
works with apache-jsp (which is Tomcat) but I've had lots of issues trying
to get it to work right.
I know we can't use GPL licensed dependencies but I think the dependencies
below are both GPL and CDDL. Can we still use the dependencies since they
are also under CDDL or is that not allowed?
<dependency>
<groupId>javax.servlet</groupId>
<artifactId>javax.servlet-api</artifactId>
<version>3.1</version>
</dependency>
<dependency>
<groupId>javax.servlet.jsp</groupId>
<artifactId>javax.servlet.jsp-api</artifactId>
<version>2.3.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp</artifactId>
<version>2.3.2</version>
</dependency>
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp.jstl</artifactId>
<version>1.2.2</version>
</dependency>
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by "John D. Ament" <jo...@apache.org>.
For each Java Spec, The geronimo specs project within Geronimo is what's
responsible for generating the spec jar within ASF. The exception is
servlet which is owned by Tomcat. The JMS 2.0 JAR is apache licensed and a
pretty well working equivalent of the API JAR.
You can see what we did for Artemis to get it to use Servlet 3.1 from
Tomcat, but still run Jetty
https://github.com/apache/activemq-artemis/blob/master/pom.xml#L434
John
On Tue, Aug 18, 2015 at 1:20 PM Christopher Shannon <
christopher.l.shannon@gmail.com> wrote:
> Dan,
>
> The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we had
> to use a geronimo version of it in Artemis. Any idea why? For example,
> this seems to apply to the servlet 3.1 spec jar that I listed and the fact
> that we had to use a different jar file for jms 2.0 leads me to believe we
> can't use the servlet 3.1 jar either.
>
>
> On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <dk...@apache.org> wrote:
>
> > CDDL is category B and can be used:
> >
> > http://apache.org/legal/resolved.html#category-b
> >
> >
> > Dan
> >
> >
> >
> > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > christopher.l.shannon@gmail.com> wrote:
> > >
> > > Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> > > included either if the source is available. So any guidance is
> > appreciated
> > > from anyone who has dealt with the licensing stuff before.
> > >
> > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > christopher.l.shannon@gmail.com> wrote:
> > >
> > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > >> https://issues.apache.org/jira/browse/AMQ-5356
> > >>
> > >> Part of the upgrade requires updating dependencies for the servlet and
> > jsp
> > >> jars. Jetty has two different versions of jsp implementations it is
> > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > >> dependencies are compatible with Apache licensing. Supposedly Jetty
> > also
> > >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> > trying
> > >> to get it to work right.
> > >>
> > >> I know we can't use GPL licensed dependencies but I think the
> > dependencies
> > >> below are both GPL and CDDL. Can we still use the dependencies since
> > they
> > >> are also under CDDL or is that not allowed?
> > >>
> > >> <dependency>
> > >> <groupId>javax.servlet</groupId>
> > >> <artifactId>javax.servlet-api</artifactId>
> > >> <version>3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>javax.servlet.jsp</groupId>
> > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > >> <version>2.3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp</artifactId>
> > >> <version>2.3.2</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > >> <version>1.2.2</version>
> > >> </dependency>
> > >>
> > >>
> >
> > --
> > Daniel Kulp
> > dkulp@apache.org - http://dankulp.com/blog
> > Talend Community Coder - http://coders.talend.com
> >
> >
>
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by Christopher Shannon <ch...@gmail.com>.
I did some more research and it looks like Jetty 9.2.x and above now
defaults to the apache-jsp (tomcat) implementation. This is actually ideal
as it would take care of the licensing issues. So I'm going to go ahead
and stick with that version. I had a couple of issues getting that
implementation to work but I think it's just a config issue and I have a
couple of ideas on how to fix it.
Thanks for the help everyone.
On Tue, Aug 18, 2015 at 3:59 PM, Christopher Shannon <
christopher.l.shannon@gmail.com> wrote:
> Yeah, the web console (admin console) is. I'm running into all kinds of
> issues trying to get it to work. I can get it to work in eclipse but the
> JSP support keeps blowing up when trying to deploy the app. I've been
> trying different combinations of JSP, JSTL, etc jars to find the ones that
> will work and that's when I saw the potential licensing issues.
>
> So, still not sure which jars I need to get it working yet but at least
> wanted to find out which ones are even eligible to use.
>
> On Tue, Aug 18, 2015 at 3:20 PM, John D. Ament <jo...@gmail.com>
> wrote:
>
>> Is activemq using JSPs?
>>
>> On Tue, Aug 18, 2015 at 2:42 PM Christopher Shannon <
>> christopher.l.shannon@gmail.com> wrote:
>>
>> > Thanks John and Hiram.
>> >
>> > I will use the Tomcat Serlvet and JSP api jars instead of the standard
>> ones
>> > since they are ASL. That solves the problem for the API.
>> >
>> > Are the other jars ok that I listed since they are CDDL? These are the
>> > actual implementation jars that Jetty uses for JSP/JSTL.
>> >
>> > <dependency>
>> > <groupId>org.glassfish.web</groupId>
>> > <artifactId>javax.servlet.jsp</artifactId>
>> > </dependency>
>> > <dependency>
>> > <groupId>org.glassfish.web</groupId>
>> > <artifactId>javax.servlet.jsp.jstl</artifactId>
>> > </dependency>
>> >
>> >
>> > On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <hi...@hiramchirino.com>
>> > wrote:
>> >
>> > > We prefer ASL when it's available. That's whey we package Germino
>> > versions.
>> > >
>> > > On Tuesday, August 18, 2015, Christopher Shannon <
>> > > christopher.l.shannon@gmail.com> wrote:
>> > >
>> > > > Dan,
>> > > >
>> > > > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like
>> we
>> > > had
>> > > > to use a geronimo version of it in Artemis. Any idea why? For
>> example,
>> > > > this seems to apply to the servlet 3.1 spec jar that I listed and
>> the
>> > > fact
>> > > > that we had to use a different jar file for jms 2.0 leads me to
>> believe
>> > > we
>> > > > can't use the servlet 3.1 jar either.
>> > > >
>> > > >
>> > > > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <dkulp@apache.org
>> > > > <javascript:;>> wrote:
>> > > >
>> > > > > CDDL is category B and can be used:
>> > > > >
>> > > > > http://apache.org/legal/resolved.html#category-b
>> > > > >
>> > > > >
>> > > > > Dan
>> > > > >
>> > > > >
>> > > > >
>> > > > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
>> > > > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
>> > > > > >
>> > > > > > Actually, re-reading the Apache guidance I'm not sure that CDDL
>> can
>> > > be
>> > > > > > included either if the source is available. So any guidance is
>> > > > > appreciated
>> > > > > > from anyone who has dealt with the licensing stuff before.
>> > > > > >
>> > > > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
>> > > > > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
>> > > > > >
>> > > > > >> I'm working on upgrading to Jetty 9.2.x to fix:
>> > > > > >> https://issues.apache.org/jira/browse/AMQ-5356
>> > > > > >>
>> > > > > >> Part of the upgrade requires updating dependencies for the
>> servlet
>> > > and
>> > > > > jsp
>> > > > > >> jars. Jetty has two different versions of jsp implementations
>> it
>> > is
>> > > > > >> supposed to work. The jetty-jsp works fine but I'm not sure if
>> the
>> > > > > >> dependencies are compatible with Apache licensing. Supposedly
>> > Jetty
>> > > > > also
>> > > > > >> works with apache-jsp (which is Tomcat) but I've had lots of
>> > issues
>> > > > > trying
>> > > > > >> to get it to work right.
>> > > > > >>
>> > > > > >> I know we can't use GPL licensed dependencies but I think the
>> > > > > dependencies
>> > > > > >> below are both GPL and CDDL. Can we still use the dependencies
>> > > since
>> > > > > they
>> > > > > >> are also under CDDL or is that not allowed?
>> > > > > >>
>> > > > > >> <dependency>
>> > > > > >> <groupId>javax.servlet</groupId>
>> > > > > >> <artifactId>javax.servlet-api</artifactId>
>> > > > > >> <version>3.1</version>
>> > > > > >> </dependency>
>> > > > > >> <dependency>
>> > > > > >> <groupId>javax.servlet.jsp</groupId>
>> > > > > >> <artifactId>javax.servlet.jsp-api</artifactId>
>> > > > > >> <version>2.3.1</version>
>> > > > > >> </dependency>
>> > > > > >> <dependency>
>> > > > > >> <groupId>org.glassfish.web</groupId>
>> > > > > >> <artifactId>javax.servlet.jsp</artifactId>
>> > > > > >> <version>2.3.2</version>
>> > > > > >> </dependency>
>> > > > > >> <dependency>
>> > > > > >> <groupId>org.glassfish.web</groupId>
>> > > > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
>> > > > > >> <version>1.2.2</version>
>> > > > > >> </dependency>
>> > > > > >>
>> > > > > >>
>> > > > >
>> > > > > --
>> > > > > Daniel Kulp
>> > > > > dkulp@apache.org <javascript:;> - http://dankulp.com/blog
>> > > > > Talend Community Coder - http://coders.talend.com
>> > > > >
>> > > > >
>> > > >
>> > >
>> > >
>> > > --
>> > > Hiram Chirino
>> > > Engineering | Red Hat, Inc.
>> > > hchirino@redhat.com | fusesource.com | redhat.com
>> > > skype: hiramchirino | twitter: @hiramchirino
>> > >
>> >
>>
>
>
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by Christopher Shannon <ch...@gmail.com>.
Yeah, the web console (admin console) is. I'm running into all kinds of
issues trying to get it to work. I can get it to work in eclipse but the
JSP support keeps blowing up when trying to deploy the app. I've been
trying different combinations of JSP, JSTL, etc jars to find the ones that
will work and that's when I saw the potential licensing issues.
So, still not sure which jars I need to get it working yet but at least
wanted to find out which ones are even eligible to use.
On Tue, Aug 18, 2015 at 3:20 PM, John D. Ament <jo...@gmail.com>
wrote:
> Is activemq using JSPs?
>
> On Tue, Aug 18, 2015 at 2:42 PM Christopher Shannon <
> christopher.l.shannon@gmail.com> wrote:
>
> > Thanks John and Hiram.
> >
> > I will use the Tomcat Serlvet and JSP api jars instead of the standard
> ones
> > since they are ASL. That solves the problem for the API.
> >
> > Are the other jars ok that I listed since they are CDDL? These are the
> > actual implementation jars that Jetty uses for JSP/JSTL.
> >
> > <dependency>
> > <groupId>org.glassfish.web</groupId>
> > <artifactId>javax.servlet.jsp</artifactId>
> > </dependency>
> > <dependency>
> > <groupId>org.glassfish.web</groupId>
> > <artifactId>javax.servlet.jsp.jstl</artifactId>
> > </dependency>
> >
> >
> > On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <hi...@hiramchirino.com>
> > wrote:
> >
> > > We prefer ASL when it's available. That's whey we package Germino
> > versions.
> > >
> > > On Tuesday, August 18, 2015, Christopher Shannon <
> > > christopher.l.shannon@gmail.com> wrote:
> > >
> > > > Dan,
> > > >
> > > > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like
> we
> > > had
> > > > to use a geronimo version of it in Artemis. Any idea why? For
> example,
> > > > this seems to apply to the servlet 3.1 spec jar that I listed and the
> > > fact
> > > > that we had to use a different jar file for jms 2.0 leads me to
> believe
> > > we
> > > > can't use the servlet 3.1 jar either.
> > > >
> > > >
> > > > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <dkulp@apache.org
> > > > <javascript:;>> wrote:
> > > >
> > > > > CDDL is category B and can be used:
> > > > >
> > > > > http://apache.org/legal/resolved.html#category-b
> > > > >
> > > > >
> > > > > Dan
> > > > >
> > > > >
> > > > >
> > > > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > > > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > > > > >
> > > > > > Actually, re-reading the Apache guidance I'm not sure that CDDL
> can
> > > be
> > > > > > included either if the source is available. So any guidance is
> > > > > appreciated
> > > > > > from anyone who has dealt with the licensing stuff before.
> > > > > >
> > > > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > > > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > > > > >
> > > > > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > > > > >> https://issues.apache.org/jira/browse/AMQ-5356
> > > > > >>
> > > > > >> Part of the upgrade requires updating dependencies for the
> servlet
> > > and
> > > > > jsp
> > > > > >> jars. Jetty has two different versions of jsp implementations it
> > is
> > > > > >> supposed to work. The jetty-jsp works fine but I'm not sure if
> the
> > > > > >> dependencies are compatible with Apache licensing. Supposedly
> > Jetty
> > > > > also
> > > > > >> works with apache-jsp (which is Tomcat) but I've had lots of
> > issues
> > > > > trying
> > > > > >> to get it to work right.
> > > > > >>
> > > > > >> I know we can't use GPL licensed dependencies but I think the
> > > > > dependencies
> > > > > >> below are both GPL and CDDL. Can we still use the dependencies
> > > since
> > > > > they
> > > > > >> are also under CDDL or is that not allowed?
> > > > > >>
> > > > > >> <dependency>
> > > > > >> <groupId>javax.servlet</groupId>
> > > > > >> <artifactId>javax.servlet-api</artifactId>
> > > > > >> <version>3.1</version>
> > > > > >> </dependency>
> > > > > >> <dependency>
> > > > > >> <groupId>javax.servlet.jsp</groupId>
> > > > > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > > > > >> <version>2.3.1</version>
> > > > > >> </dependency>
> > > > > >> <dependency>
> > > > > >> <groupId>org.glassfish.web</groupId>
> > > > > >> <artifactId>javax.servlet.jsp</artifactId>
> > > > > >> <version>2.3.2</version>
> > > > > >> </dependency>
> > > > > >> <dependency>
> > > > > >> <groupId>org.glassfish.web</groupId>
> > > > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > > > > >> <version>1.2.2</version>
> > > > > >> </dependency>
> > > > > >>
> > > > > >>
> > > > >
> > > > > --
> > > > > Daniel Kulp
> > > > > dkulp@apache.org <javascript:;> - http://dankulp.com/blog
> > > > > Talend Community Coder - http://coders.talend.com
> > > > >
> > > > >
> > > >
> > >
> > >
> > > --
> > > Hiram Chirino
> > > Engineering | Red Hat, Inc.
> > > hchirino@redhat.com | fusesource.com | redhat.com
> > > skype: hiramchirino | twitter: @hiramchirino
> > >
> >
>
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by "John D. Ament" <jo...@gmail.com>.
Is activemq using JSPs?
On Tue, Aug 18, 2015 at 2:42 PM Christopher Shannon <
christopher.l.shannon@gmail.com> wrote:
> Thanks John and Hiram.
>
> I will use the Tomcat Serlvet and JSP api jars instead of the standard ones
> since they are ASL. That solves the problem for the API.
>
> Are the other jars ok that I listed since they are CDDL? These are the
> actual implementation jars that Jetty uses for JSP/JSTL.
>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp</artifactId>
> </dependency>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp.jstl</artifactId>
> </dependency>
>
>
> On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <hi...@hiramchirino.com>
> wrote:
>
> > We prefer ASL when it's available. That's whey we package Germino
> versions.
> >
> > On Tuesday, August 18, 2015, Christopher Shannon <
> > christopher.l.shannon@gmail.com> wrote:
> >
> > > Dan,
> > >
> > > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we
> > had
> > > to use a geronimo version of it in Artemis. Any idea why? For example,
> > > this seems to apply to the servlet 3.1 spec jar that I listed and the
> > fact
> > > that we had to use a different jar file for jms 2.0 leads me to believe
> > we
> > > can't use the servlet 3.1 jar either.
> > >
> > >
> > > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <dkulp@apache.org
> > > <javascript:;>> wrote:
> > >
> > > > CDDL is category B and can be used:
> > > >
> > > > http://apache.org/legal/resolved.html#category-b
> > > >
> > > >
> > > > Dan
> > > >
> > > >
> > > >
> > > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > > > >
> > > > > Actually, re-reading the Apache guidance I'm not sure that CDDL can
> > be
> > > > > included either if the source is available. So any guidance is
> > > > appreciated
> > > > > from anyone who has dealt with the licensing stuff before.
> > > > >
> > > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > > > >
> > > > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > > > >> https://issues.apache.org/jira/browse/AMQ-5356
> > > > >>
> > > > >> Part of the upgrade requires updating dependencies for the servlet
> > and
> > > > jsp
> > > > >> jars. Jetty has two different versions of jsp implementations it
> is
> > > > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > > > >> dependencies are compatible with Apache licensing. Supposedly
> Jetty
> > > > also
> > > > >> works with apache-jsp (which is Tomcat) but I've had lots of
> issues
> > > > trying
> > > > >> to get it to work right.
> > > > >>
> > > > >> I know we can't use GPL licensed dependencies but I think the
> > > > dependencies
> > > > >> below are both GPL and CDDL. Can we still use the dependencies
> > since
> > > > they
> > > > >> are also under CDDL or is that not allowed?
> > > > >>
> > > > >> <dependency>
> > > > >> <groupId>javax.servlet</groupId>
> > > > >> <artifactId>javax.servlet-api</artifactId>
> > > > >> <version>3.1</version>
> > > > >> </dependency>
> > > > >> <dependency>
> > > > >> <groupId>javax.servlet.jsp</groupId>
> > > > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > > > >> <version>2.3.1</version>
> > > > >> </dependency>
> > > > >> <dependency>
> > > > >> <groupId>org.glassfish.web</groupId>
> > > > >> <artifactId>javax.servlet.jsp</artifactId>
> > > > >> <version>2.3.2</version>
> > > > >> </dependency>
> > > > >> <dependency>
> > > > >> <groupId>org.glassfish.web</groupId>
> > > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > > > >> <version>1.2.2</version>
> > > > >> </dependency>
> > > > >>
> > > > >>
> > > >
> > > > --
> > > > Daniel Kulp
> > > > dkulp@apache.org <javascript:;> - http://dankulp.com/blog
> > > > Talend Community Coder - http://coders.talend.com
> > > >
> > > >
> > >
> >
> >
> > --
> > Hiram Chirino
> > Engineering | Red Hat, Inc.
> > hchirino@redhat.com | fusesource.com | redhat.com
> > skype: hiramchirino | twitter: @hiramchirino
> >
>
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by Christopher Shannon <ch...@gmail.com>.
Thanks John and Hiram.
I will use the Tomcat Serlvet and JSP api jars instead of the standard ones
since they are ASL. That solves the problem for the API.
Are the other jars ok that I listed since they are CDDL? These are the
actual implementation jars that Jetty uses for JSP/JSTL.
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp</artifactId>
</dependency>
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp.jstl</artifactId>
</dependency>
On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <hi...@hiramchirino.com>
wrote:
> We prefer ASL when it's available. That's whey we package Germino versions.
>
> On Tuesday, August 18, 2015, Christopher Shannon <
> christopher.l.shannon@gmail.com> wrote:
>
> > Dan,
> >
> > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we
> had
> > to use a geronimo version of it in Artemis. Any idea why? For example,
> > this seems to apply to the servlet 3.1 spec jar that I listed and the
> fact
> > that we had to use a different jar file for jms 2.0 leads me to believe
> we
> > can't use the servlet 3.1 jar either.
> >
> >
> > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <dkulp@apache.org
> > <javascript:;>> wrote:
> >
> > > CDDL is category B and can be used:
> > >
> > > http://apache.org/legal/resolved.html#category-b
> > >
> > >
> > > Dan
> > >
> > >
> > >
> > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > > >
> > > > Actually, re-reading the Apache guidance I'm not sure that CDDL can
> be
> > > > included either if the source is available. So any guidance is
> > > appreciated
> > > > from anyone who has dealt with the licensing stuff before.
> > > >
> > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > > >
> > > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > > >> https://issues.apache.org/jira/browse/AMQ-5356
> > > >>
> > > >> Part of the upgrade requires updating dependencies for the servlet
> and
> > > jsp
> > > >> jars. Jetty has two different versions of jsp implementations it is
> > > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > > >> dependencies are compatible with Apache licensing. Supposedly Jetty
> > > also
> > > >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> > > trying
> > > >> to get it to work right.
> > > >>
> > > >> I know we can't use GPL licensed dependencies but I think the
> > > dependencies
> > > >> below are both GPL and CDDL. Can we still use the dependencies
> since
> > > they
> > > >> are also under CDDL or is that not allowed?
> > > >>
> > > >> <dependency>
> > > >> <groupId>javax.servlet</groupId>
> > > >> <artifactId>javax.servlet-api</artifactId>
> > > >> <version>3.1</version>
> > > >> </dependency>
> > > >> <dependency>
> > > >> <groupId>javax.servlet.jsp</groupId>
> > > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > > >> <version>2.3.1</version>
> > > >> </dependency>
> > > >> <dependency>
> > > >> <groupId>org.glassfish.web</groupId>
> > > >> <artifactId>javax.servlet.jsp</artifactId>
> > > >> <version>2.3.2</version>
> > > >> </dependency>
> > > >> <dependency>
> > > >> <groupId>org.glassfish.web</groupId>
> > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > > >> <version>1.2.2</version>
> > > >> </dependency>
> > > >>
> > > >>
> > >
> > > --
> > > Daniel Kulp
> > > dkulp@apache.org <javascript:;> - http://dankulp.com/blog
> > > Talend Community Coder - http://coders.talend.com
> > >
> > >
> >
>
>
> --
> Hiram Chirino
> Engineering | Red Hat, Inc.
> hchirino@redhat.com | fusesource.com | redhat.com
> skype: hiramchirino | twitter: @hiramchirino
>
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by Hiram Chirino <hi...@hiramchirino.com>.
We prefer ASL when it's available. That's whey we package Germino versions.
On Tuesday, August 18, 2015, Christopher Shannon <
christopher.l.shannon@gmail.com> wrote:
> Dan,
>
> The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we had
> to use a geronimo version of it in Artemis. Any idea why? For example,
> this seems to apply to the servlet 3.1 spec jar that I listed and the fact
> that we had to use a different jar file for jms 2.0 leads me to believe we
> can't use the servlet 3.1 jar either.
>
>
> On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <dkulp@apache.org
> <javascript:;>> wrote:
>
> > CDDL is category B and can be used:
> >
> > http://apache.org/legal/resolved.html#category-b
> >
> >
> > Dan
> >
> >
> >
> > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > >
> > > Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> > > included either if the source is available. So any guidance is
> > appreciated
> > > from anyone who has dealt with the licensing stuff before.
> > >
> > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > christopher.l.shannon@gmail.com <javascript:;>> wrote:
> > >
> > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > >> https://issues.apache.org/jira/browse/AMQ-5356
> > >>
> > >> Part of the upgrade requires updating dependencies for the servlet and
> > jsp
> > >> jars. Jetty has two different versions of jsp implementations it is
> > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > >> dependencies are compatible with Apache licensing. Supposedly Jetty
> > also
> > >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> > trying
> > >> to get it to work right.
> > >>
> > >> I know we can't use GPL licensed dependencies but I think the
> > dependencies
> > >> below are both GPL and CDDL. Can we still use the dependencies since
> > they
> > >> are also under CDDL or is that not allowed?
> > >>
> > >> <dependency>
> > >> <groupId>javax.servlet</groupId>
> > >> <artifactId>javax.servlet-api</artifactId>
> > >> <version>3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>javax.servlet.jsp</groupId>
> > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > >> <version>2.3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp</artifactId>
> > >> <version>2.3.2</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > >> <version>1.2.2</version>
> > >> </dependency>
> > >>
> > >>
> >
> > --
> > Daniel Kulp
> > dkulp@apache.org <javascript:;> - http://dankulp.com/blog
> > Talend Community Coder - http://coders.talend.com
> >
> >
>
--
Hiram Chirino
Engineering | Red Hat, Inc.
hchirino@redhat.com | fusesource.com | redhat.com
skype: hiramchirino | twitter: @hiramchirino
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by Christopher Shannon <ch...@gmail.com>.
Dan,
The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we had
to use a geronimo version of it in Artemis. Any idea why? For example,
this seems to apply to the servlet 3.1 spec jar that I listed and the fact
that we had to use a different jar file for jms 2.0 leads me to believe we
can't use the servlet 3.1 jar either.
On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <dk...@apache.org> wrote:
> CDDL is category B and can be used:
>
> http://apache.org/legal/resolved.html#category-b
>
>
> Dan
>
>
>
> > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> christopher.l.shannon@gmail.com> wrote:
> >
> > Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> > included either if the source is available. So any guidance is
> appreciated
> > from anyone who has dealt with the licensing stuff before.
> >
> > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > christopher.l.shannon@gmail.com> wrote:
> >
> >> I'm working on upgrading to Jetty 9.2.x to fix:
> >> https://issues.apache.org/jira/browse/AMQ-5356
> >>
> >> Part of the upgrade requires updating dependencies for the servlet and
> jsp
> >> jars. Jetty has two different versions of jsp implementations it is
> >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> >> dependencies are compatible with Apache licensing. Supposedly Jetty
> also
> >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> trying
> >> to get it to work right.
> >>
> >> I know we can't use GPL licensed dependencies but I think the
> dependencies
> >> below are both GPL and CDDL. Can we still use the dependencies since
> they
> >> are also under CDDL or is that not allowed?
> >>
> >> <dependency>
> >> <groupId>javax.servlet</groupId>
> >> <artifactId>javax.servlet-api</artifactId>
> >> <version>3.1</version>
> >> </dependency>
> >> <dependency>
> >> <groupId>javax.servlet.jsp</groupId>
> >> <artifactId>javax.servlet.jsp-api</artifactId>
> >> <version>2.3.1</version>
> >> </dependency>
> >> <dependency>
> >> <groupId>org.glassfish.web</groupId>
> >> <artifactId>javax.servlet.jsp</artifactId>
> >> <version>2.3.2</version>
> >> </dependency>
> >> <dependency>
> >> <groupId>org.glassfish.web</groupId>
> >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> >> <version>1.2.2</version>
> >> </dependency>
> >>
> >>
>
> --
> Daniel Kulp
> dkulp@apache.org - http://dankulp.com/blog
> Talend Community Coder - http://coders.talend.com
>
>
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by Daniel Kulp <dk...@apache.org>.
CDDL is category B and can be used:
http://apache.org/legal/resolved.html#category-b
Dan
> On Aug 18, 2015, at 12:33 PM, Christopher Shannon <ch...@gmail.com> wrote:
>
> Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> included either if the source is available. So any guidance is appreciated
> from anyone who has dealt with the licensing stuff before.
>
> On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> christopher.l.shannon@gmail.com> wrote:
>
>> I'm working on upgrading to Jetty 9.2.x to fix:
>> https://issues.apache.org/jira/browse/AMQ-5356
>>
>> Part of the upgrade requires updating dependencies for the servlet and jsp
>> jars. Jetty has two different versions of jsp implementations it is
>> supposed to work. The jetty-jsp works fine but I'm not sure if the
>> dependencies are compatible with Apache licensing. Supposedly Jetty also
>> works with apache-jsp (which is Tomcat) but I've had lots of issues trying
>> to get it to work right.
>>
>> I know we can't use GPL licensed dependencies but I think the dependencies
>> below are both GPL and CDDL. Can we still use the dependencies since they
>> are also under CDDL or is that not allowed?
>>
>> <dependency>
>> <groupId>javax.servlet</groupId>
>> <artifactId>javax.servlet-api</artifactId>
>> <version>3.1</version>
>> </dependency>
>> <dependency>
>> <groupId>javax.servlet.jsp</groupId>
>> <artifactId>javax.servlet.jsp-api</artifactId>
>> <version>2.3.1</version>
>> </dependency>
>> <dependency>
>> <groupId>org.glassfish.web</groupId>
>> <artifactId>javax.servlet.jsp</artifactId>
>> <version>2.3.2</version>
>> </dependency>
>> <dependency>
>> <groupId>org.glassfish.web</groupId>
>> <artifactId>javax.servlet.jsp.jstl</artifactId>
>> <version>1.2.2</version>
>> </dependency>
>>
>>
--
Daniel Kulp
dkulp@apache.org - http://dankulp.com/blog
Talend Community Coder - http://coders.talend.com
Re: [DISCUSS] Jetty 9.2 dependency licensing issues
Posted by Christopher Shannon <ch...@gmail.com>.
Actually, re-reading the Apache guidance I'm not sure that CDDL can be
included either if the source is available. So any guidance is appreciated
from anyone who has dealt with the licensing stuff before.
On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
christopher.l.shannon@gmail.com> wrote:
> I'm working on upgrading to Jetty 9.2.x to fix:
> https://issues.apache.org/jira/browse/AMQ-5356
>
> Part of the upgrade requires updating dependencies for the servlet and jsp
> jars. Jetty has two different versions of jsp implementations it is
> supposed to work. The jetty-jsp works fine but I'm not sure if the
> dependencies are compatible with Apache licensing. Supposedly Jetty also
> works with apache-jsp (which is Tomcat) but I've had lots of issues trying
> to get it to work right.
>
> I know we can't use GPL licensed dependencies but I think the dependencies
> below are both GPL and CDDL. Can we still use the dependencies since they
> are also under CDDL or is that not allowed?
>
> <dependency>
> <groupId>javax.servlet</groupId>
> <artifactId>javax.servlet-api</artifactId>
> <version>3.1</version>
> </dependency>
> <dependency>
> <groupId>javax.servlet.jsp</groupId>
> <artifactId>javax.servlet.jsp-api</artifactId>
> <version>2.3.1</version>
> </dependency>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp</artifactId>
> <version>2.3.2</version>
> </dependency>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp.jstl</artifactId>
> <version>1.2.2</version>
> </dependency>
>
>