Bug #16755 Please find a SSL library that is FLOSS-Exception / LGPL copyrighted
Submitted: 24 Jan 2006 18:21 Modified: 9 Aug 2006 19:29
Reporter: Christian Hammers (Silver Quality Contributor) (OCA) Email Updates:
Status: Closed Impact on me:
None 
Category:Licensing Severity:S3 (Non-critical)
Version:5.0 OS:Linux (Debian GNU/Linux)
Assigned to: Magnus Blåudd CPU Architecture:Any

[24 Jan 2006 18:21] Christian Hammers
Description:
Hello

Distributions may not ship MySQL build with "--with-yassl" as YaSSL is GPL'd but not covered by the FLOSS exception add-on licence (as you cannot redefine other authors copyright statements) and thus not compatible with e.g. PHP.

bye,

-christian-

P.S.: On a related note, matrixssl.org lists you as a reference software but at least in
        mysql-5.0.18 I cannot find their code? :)

How to repeat:
...

Suggested fix:
a) Convince your programmers to use a different SSL library (like e.g. the latest GnuTLS    
    which seems to be LGPL now, maybe?)
b) Convince YaSSL to relicence under e.g. the LGPL or add a FLOSS exception, too
[14 Apr 2006 17:10] Christian Hammers
Hello!
The yaSSL source in the distribution are all marked as licenced under the GPL which demands that all resulting products are also GPL. Your MySQL product is licenced as "GPL with modifications (FLOSS)" so it seems to me that you are currently violating the yaSSL licence, or?

Most probably yassl.com is quite happy to be distributed with MySQL but still you should make the copyright situation clear.

bye,

-christian-
[17 Apr 2006 3:50] Arjen Lentz
The Community Edition builds of MySQL server are pure GPL.

The MySQL Client Library is GPL and has the FLOSS exception attached also. This document is somewhat unfortunately named, as it's actually an extension of the GPL license. As you know GPL does not allow clauses to restrict people's freedom further, however it does allow people's freedoms to be extended further. And this is exactly what the FLOSS exception does. This is perfectly GPL compatible, and so I see no incompatibility with yaSSL's own GPL licensing. Right?

There remains the issue you raised earlier, namely that if someone links to yaSSL indirectly by linking in the MySQL client library under the FLOSS exception (for instance in to Apache, or PHP), then there may still be a licensing incompatibility between yaSSL and that bigger app. Your suggestion was sensible, namely that yaSSL go either LGPL or include a similar FLOSS exception (I suggest they call it extension ;-) as the MySQL client libs.
[27 Apr 2006 20:17] Christian Hammers
> As you know GPL does not allow clauses to restrict people's freedom
> further, however it does allow people's freedoms to be extended further. 

But only the original author is in the position to grant those rights. MySQL is not the author of yassl
so MySQL may not extend the rights that the yassl authors have choosen for their yassl software.
You may only extend the code you have copyright on.

Example: I write a funky ChristianDB based on 20% mysql code and put the whole thing under a license that allowes people to write closed source with it. I'm sure you would not agree that I'm in
a position to grant the third party more rights on the mysql code than you granted me although I would of course be free to allow my own code to be used by whomever I like to.

So the yassl people have to announce that they allow you to put their software under GPL+FLOSS Exception (or put yassl under GPL+FLOSS themselves)!

bye,

-christian-
[21 Jun 2006 2:38] Arjen Lentz
Following up with Todd Ouska of YASSL (contact details received from Brian Aker).
[22 Jun 2006 1:59] Arjen Lentz
Received positive initial response from yaSSL about extending their license info, they're now discussing internally.
[5 Jul 2006 6:13] Arjen Lentz
yaSSL team agreed to add FLOSS exception similar to MySQL to resolve licensing incompatibilities. Good stuff!
Now under review to make sure this covers the issues.
[6 Jul 2006 2:46] Arjen Lentz
Review by external (Zak Greant) done, he agrees this should resolve the described   issue.

Now just awaiting new release from yaSSL incorporating the relevant notifications in their files.
[17 Jul 2006 6:10] Arjen Lentz
It's now in the CVS of yaSSL, and the kind people there tell me there'll be a new yaSSL release within the new two weeks. I've asked our build team to include it from the next 5.x build after that.
[17 Jul 2006 8:50] Bugs System
A patch for this bug has been committed. After review, it may
be pushed to the relevant source trees for release in the next
version. You can access the patch from:

  http://lists.mysql.com/commits/9216
[18 Jul 2006 12:57] Magnus Blåudd
Pushed to 5.0.25
[9 Aug 2006 19:29] Paul DuBois
Noted in 5.0.25 changelog.

The bundled yaSSL library licensing has added a FLOSS exception
similar to MySQL to resolve licensing incompatibilities with MySQL.
(See the extra/yassl/FLOSS-EXCEPTIONS file in a MySQL source
distribution for details.)
[9 Aug 2006 19:53] Paul DuBois
Noted in 5.1.12 changelog as well.