Hello, I wrote to upstream and he cleared all concerns.
---------- Forwarded message ---------- From: Paul E. Jones <pau...@packetizer.com> Date: Sat, Nov 30, 2013 at 7:44 PM Subject: Re: sha1 license To: Pau Garcia i Quiles <pgqui...@elpauer.org> Pau, That is a little odd to claim it can't be modified. The whole point of making it free is so that developers can do anything they want with it. Somebody is adding more to what free means than what free means. The code is totally free, with no restrictions on it whatsoever. There are no fees, no requirements to provide changes back to me, etc., and of course people can modify it. It would not be free if they couldn't. (And many people have. It's used in lots of projects, some free and some commercial.) I inserted the "Freeware Public License" line to poke fun at the GNU Public License, which really is encumbered by silly restrictions. My code has absolutely no restrictions whatsoever. You are hereby authorized to make any change you want to the license file or even adapt it as you see fit to address your own concerns. When I say it is free, I mean it really is free :-) Paul ------------------------------ *From:* Pau Garcia i Quiles <pgqui...@elpauer.org> *Sent:* Sat Nov 30 12:05:22 EST 2013 *To:* pau...@packetizer.com *Subject:* sha1 license Hello, I am the Debian packager of Wt ( http://www.webtoolkit.eu ), a C++ web framework that uses your C SHA1 implementation. http://www.packetizer.com/security/sha1/sha1-c.zip It has come to my attention that your SHA1 implementation is licensed under the Freeware Public License, which does not allow modification, and therefore is not open source: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730758 I was wondering if the inexistence of a modification clause is on purpose or just an oversight. In case it is an oversight, would you mind adding a modification clause to the FPL? (or licensing under another license, e. g. a 2-clause BSD license, a MIT license or a Mozilla Public License). Otherwise, I will have to ask Wt (and probably other projects, such as Qt) to replace your SHA1 implementation with an open source one. Thank you
