From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 4774 invoked by alias); 13 Jan 2004 19:56:42 -0000 Mailing-List: contact ecos-maintainers-help@sources.redhat.com; run by ezmlm Precedence: bulk List-Subscribe: List-Post: List-Help: , Sender: ecos-maintainers-owner@sources.redhat.com Received: (qmail 4766 invoked from network); 13 Jan 2004 19:56:41 -0000 Message-ID: <40044D77.1050509@eCosCentric.com> Date: Tue, 13 Jan 2004 19:56:00 -0000 From: Jonathan Larmour User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.4) Gecko/20030703 X-Accept-Language: en-gb, en, en-us MIME-Version: 1.0 To: Luke Kenneth Casson Leighton Cc: ecos-maintainers@ecos.sourceware.org Subject: Re: export of openssl from US _is_ legal References: <20040113164244.GC18959@lkcl.net> <20040113164955.GK11709@biferten.ma.tech.ascom.ch> <20040113165509.GE18959@lkcl.net> In-Reply-To: <20040113165509.GE18959@lkcl.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-SW-Source: 2004-01/txt/msg00007.txt.bz2 Luke Kenneth Casson Leighton wrote: > On Tue, Jan 13, 2004 at 05:49:55PM +0100, Andrew Lunn wrote: > >>On Tue, Jan 13, 2004 at 04:42:44PM +0000, Luke Kenneth Casson Leighton wrote: >> >>>dear ecos maintainers, >>> >>>your web site incorrectly says that the openssl port cannot be >>>hosted on a US server. >>> >>>open source projects _can_ be exported from the US. >>> >>>what you need to do is to inform the US government of _where_ >>>the software can be obtained from. >>> >>>you need to do some research in order to find out the exact details. >> >>Sure, it can be done. The generic OpenSSL package does it, cygwin does >>it. But as far as i know, its APITA to sort out. > > > from what i understand, the notification - send an email - is > sufficient. From our discussions with lawyers who claimed to be experts on this, it unfortunately isn't that simple. It would be even harder to integrate it into CVS due to the terms of the BAXA rules on notification, so it de facto has to remain in an EPK anyway. Hosting it on a server outside the US rather than inside the US doesn't really lose us anything. >>Also, how long before the US government changes there mind and adds >>new restrictions? > > cater for that by providing a non-us mirror? Then people have to be told, links changed and invalidated, blahblah :-). Jifl -- eCosCentric http://www.eCosCentric.com/ The eCos and RedBoot experts --["No sense being pessimistic, it wouldn't work anyway"]-- Opinions==mine