DB design document

Derek Atkins warlord@MIT.EDU
15 Dec 2000 18:29:12 -0500


FTR, Debian currently ships OpenSSL (at least in non-us).  So, if
Debian is willing to ship it, I don't see the problem.  We are not
creating a derivative work of OpenSSL, we would be using the OpenSSL
library (which is not the definition of derivative work).

I can't believe that people are being so religious about free software
that they aren't willing to use free software of another "flavor".  I
suppose different people have different views of that "free" means,
but I'm actually offended that people are willing to live without
security (or with less security) due to religious beliefs about the
definition of free.

I'll take a look at other security solutions, but I will insist that
security be linked into "networked-GnuCash", regardless of the actual
security toolkit that we decide to use.

-derek

Steve Greenland <steveg@moregruel.net> writes:

> On 15-Dec-00, 14:10 (CST), Bill Gribble <grib@gnumatic.com> wrote: 
> > Rest assured that the gnucash developers are just as concerned about
> > this stuff as you are.  We absolutely do not want to use any component
> > that makes any problems for distributing gnucash under straight GPL,
> > nor do anything that would cause Debian or other free software
> > distributors to consider gnucash to be non-free in any way. We cannot
> > and will not be cavalier about software licensing.
> 
> To clarify a few points:
> 
> 1. I didn't mean to imply that the gnucash developers don't care about
> these issues. I just wanted to make sure that the problem doesn't arise
> inadvertantly.
> 
> 2. With respect to "...distributing gnucash under straight GPL", I
> and most (perhaps all) Debian developers have no problem with adding
> exceptions to linking with non-GPL compatible libraries, particularly
> free libraries such as OpenSSL. IIRC, RMS has stated he doesn't have a
> real problem with doing so, so long as all the copyright holders agree
> (although I'd guess he'd prefer otherwise). The problem is not that
> OpenSSL is non-free (in a DFSG sense), the problem is that its license
> and the GPL don't mix. Debian wouldn't put GnuCash in non-free, it
> wouldn't be able to distribute it at all. (I'll add "I'm pretty sure" to
> that last statement, as I certainly don't speak in any official way for
> the Debian project, I'm just going on previous discussion.)
> 
> Your certainly welcome (even encouraged) to bring the topic up on
> the debian-legal mailling list for comments and discussion. It would
> certainly be a shame to re-implement something when it can be easily
> avoided.
> 
> Steve
> 
> -- 
> steveg@moregruel.net
> 
> _______________________________________________
> gnucash-devel mailing list
> gnucash-devel@lists.gnumatic.com
> http://www.gnumatic.com/cgi-bin/mailman/listinfo/gnucash-devel

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available