severity 499120 important thanks This one time, at band camp, Michael Casadevall said: > > During the debugging of a FTBFS in freeradius on Ubuntu, I've > determined that both on Debian and Ubuntu that freeradius has been > indirectly linking to openssl via libsnmp. Looking at libsnmp's > changelog its been linking to openssl since 2005 if not earlier. > > While freeradius does have sanity checks to determine if it is being > linked against openssl, since libsnmp didn't declare -lcrypto in its > pkgconfig file, neither the lintian openssl check, nor the one in > freeradius were triggered. It is my impression that anything that is > linked to openssl, even if indirectly is still subject to its licensing > terms due the GPL requirement that all modules its linked to, either > directly or indirectly must meet be license-compatible with the GPL. > > Since libsnmp is linked openssl, and freeradius includes snmp, > its subject to this licensing term, and thus has a license violation > in Debian. As an addition note, net-snmp's copyright file is missing > said clause as well, so a seperate bug has been filed against it. > > I've looked into the possibility of using gnutls with net-snmp, but as > far as I can tell, there is no support for it, so it would require > porting to remove its openssl dependency, or the net-snmp package would > have to be split into ssl and non-ssl versions, and then freeradius > linked against the non-ssl version.
I see this has gone without an answer for an unfortunate amount of time, and for that I'm sorry. I have never been convinced by the arguments about indirect linking, myself, but I'm not sure that this bug report is the right forum to rehash all the arguments we probably both know very well. For what it's worth, I've spoken with ftp-master in the past and gotten an explicit go ahead for this sort of thing (specifically, to build the postgres module for freeradius, which has a similar problem). I am going to downgrade the bug for now, but not close it, until I speak with ftp-master again. Cheers, -- ----------------------------------------------------------------- | ,''`. Stephen Gran | | : :' : [EMAIL PROTECTED] | | `. `' Debian user, admin, and developer | | `- http://www.debian.org | -----------------------------------------------------------------
signature.asc
Description: Digital signature
