https://redmine.ruby-lang.org/https://redmine.ruby-lang.org/favicon.ico?17113305112010-03-18T18:23:37ZRuby Issue Tracking SystemRuby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=90742010-03-18T18:23:37Zmatz (Yukihiro Matsumoto)matz@ruby.or.jp
<ul></ul><p>=begin<br>
Hi,</p>
<p>In message "Re: <a href="/issues/2982">[ruby-core:28735]</a> [Bug <a class="issue tracker-2 status-8 priority-4 priority-default closed" title="Feature: Ruby tries to link with both openssl and readline (Third Party's Issue)" href="https://redmine.ruby-lang.org/issues/2982">#2982</a>] Ruby tries to link with both openssl and readline"<br>
on Thu, 18 Mar 2010 17:01:38 +0900, Lucas Nussbaum <a href="mailto:redmine@ruby-lang.org" class="email">redmine@ruby-lang.org</a> writes:</p>
<p>|Ruby currently tries to link with both OpenSSL (which is under the SSL license), and Readline (GPL).</p>
<p>No. The Ruby does not try to link with those libraries by default,<br>
unless explicitly required by the user, so that it is a user's<br>
responsibility to avoid loading those two in the same address space.</p>
<p>License sucks.</p>
<pre><code> matz.
</code></pre>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=90752010-03-18T18:37:24Zlucas (Lucas Nussbaum)lucas@lucas-nussbaum.net
<ul></ul><p>=begin<br>
On 18/03/10 at 18:23 +0900, Yukihiro Matsumoto wrote:</p>
<blockquote>
<p>Hi,</p>
<p>In message "Re: <a href="/issues/2982">[ruby-core:28735]</a> [Bug <a class="issue tracker-2 status-8 priority-4 priority-default closed" title="Feature: Ruby tries to link with both openssl and readline (Third Party's Issue)" href="https://redmine.ruby-lang.org/issues/2982">#2982</a>] Ruby tries to link with both openssl and readline"<br>
on Thu, 18 Mar 2010 17:01:38 +0900, Lucas Nussbaum <a href="mailto:redmine@ruby-lang.org" class="email">redmine@ruby-lang.org</a> writes:</p>
<p>|Ruby currently tries to link with both OpenSSL (which is under the SSL license), and Readline (GPL).</p>
<p>No. The Ruby does not try to link with those libraries by default,<br>
unless explicitly required by the user, so that it is a user's<br>
responsibility to avoid loading those two in the same address space.</p>
</blockquote>
<p>Users, and developers of third-party libraries and application. Note<br>
that it is de-facto illegal to use openssl with GPL libraries/gems (and<br>
there are quite a lot of GPL-only libraries/gems).</p>
<blockquote>
<p>License sucks.</p>
</blockquote>
<a name="Agreed-"></a>
<h2 >Agreed ;)<a href="#Agreed-" class="wiki-anchor">¶</a></h2>
<p>| Lucas Nussbaum<br>
| <a href="mailto:lucas@lucas-nussbaum.net" class="email">lucas@lucas-nussbaum.net</a> <a href="http://www.lucas-nussbaum.net/" class="external">http://www.lucas-nussbaum.net/</a> |<br>
| jabber: <a href="mailto:lucas@nussbaum.fr" class="email">lucas@nussbaum.fr</a> GPG: 1024D/023B3F4F |</p>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=90882010-03-18T23:45:05Zaustin (Austin Ziegler)halostatue@gmail.com
<ul></ul><p>=begin<br>
On Thu, Mar 18, 2010 at 5:37 AM, Lucas Nussbaum<br>
<a href="mailto:lucas@lucas-nussbaum.net" class="email">lucas@lucas-nussbaum.net</a> wrote:</p>
<blockquote>
<p>On 18/03/10 at 18:23 +0900, Yukihiro Matsumoto wrote:</p>
<blockquote>
<p>In message "Re: <a href="/issues/2982">[ruby-core:28735]</a> [Bug <a class="issue tracker-2 status-8 priority-4 priority-default closed" title="Feature: Ruby tries to link with both openssl and readline (Third Party's Issue)" href="https://redmine.ruby-lang.org/issues/2982">#2982</a>] Ruby tries to link with both openssl and readline"<br>
on Thu, 18 Mar 2010 17:01:38 +0900, Lucas Nussbaum <a href="mailto:redmine@ruby-lang.org" class="email">redmine@ruby-lang.org</a> writes:<br>
|Ruby currently tries to link with both OpenSSL (which is under the SSL license), and Readline (GPL).</p>
<p>No. The Ruby does not try to link with those libraries by default,<br>
unless explicitly required by the user, so that it is a user's<br>
responsibility to avoid loading those two in the same address space.</p>
</blockquote>
<p>Users, and developers of third-party libraries and application. Note<br>
that it is de-facto illegal to use openssl with GPL libraries/gems (and<br>
there are quite a lot of GPL-only libraries/gems).</p>
</blockquote>
<p>This is completely incorrect and FUD. It is against the license to<br>
<em>distribute</em> GNU GPL libraries/gems with OpenSSL. There is nothing<br>
against the license for use. The GNU GPL is a distribution license,<br>
not a EULA. If end users do something but do not distribute that<br>
something, it's not illegal.</p>
<p>The FSF also takes a maximal view on shared libraries that is not so<br>
far supported by any court case or common sense. It is perfectly legal<br>
to ship a GNU GPLed Photoshop plug-in, and it is perfectly legal for a<br>
user to use such. RMS and the FSF do not believe so, but the only<br>
court cases that talk about in-memory copies indicate that they are a<br>
necessary by-product of running the program, and as such it's not a<br>
problem.</p>
<p>Please stop the GPL zealot's FUD.</p>
<a name="-austin"></a>
<h2 >-austin<a href="#-austin" class="wiki-anchor">¶</a></h2>
<p>Austin Ziegler • <a href="mailto:halostatue@gmail.com" class="email">halostatue@gmail.com</a> • <a href="mailto:austin@halostatue.ca" class="email">austin@halostatue.ca</a><br>
<a href="http://www.halostatue.ca/" class="external">http://www.halostatue.ca/</a> • <a href="http://twitter.com/halostatue" class="external">http://twitter.com/halostatue</a></p>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=90952010-03-19T00:25:59Zlucas (Lucas Nussbaum)lucas@lucas-nussbaum.net
<ul></ul><p>=begin<br>
Right, sorry. What I meant is that third-party developers might need to worry if they distribute libraries/gems linked with OpenSSL. Now, of course, it depends on your definition of linking.</p>
<p>Now, IANAL, and neither are you AFAIK, so maybe it would be better to stop calling people zealots and ask someone with a real legal expertise.<br>
=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91052010-03-19T13:41:41Znobu (Nobuyoshi Nakada)nobu@ruby-lang.org
<ul><li><strong>Status</strong> changed from <i>Open</i> to <i>Closed</i></li></ul><p>=begin</p>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91402010-03-20T04:51:52Zlucas (Lucas Nussbaum)lucas@lucas-nussbaum.net
<ul></ul><p>=begin<br>
Why was this bug marked as closed?</p>
<p>Anyway. I asked the Debian people responsible for reviewing packages before their acceptance in the Debian archive. See <a href="http://lists.debian.org/debian-legal/2010/03/msg00037.html" class="external">http://lists.debian.org/debian-legal/2010/03/msg00037.html</a> for the reply of one of them.</p>
<p>So, we would need a link exception, similar to the one in wget or freeradius, to confirm that it is allowed to link ruby's GPL code to openssl.</p>
<p>wget's exception is:<br>
Additional permission under GNU GPL version 3 section 7</p>
<p>If you modify this program, or any covered work, by linking or<br>
combining it with the OpenSSL project's OpenSSL library (or a<br>
modified version of that library), containing parts covered by the<br>
terms of the OpenSSL or SSLeay licenses, the Free Software Foundation<br>
grants you additional permission to convey the resulting work.<br>
Corresponding Source for a non-source form of such a combination<br>
shall include the source code for the parts of OpenSSL used as well<br>
as that of the covered work.</p>
<p>Freeradius exception is:<br>
This LICENSE file is a modification to the main LICENSE file, which is<br>
GPLv2. It applies only to the files in the "src" directory.</p>
<p>In addition, as a special exception, the copyright holders give<br>
permission to link the code of this program with the OpenSSL library,<br>
and distribute linked combinations including the two.<br>
You must obey the GNU General Public License in all respects<br>
for all of the code used other than OpenSSL. If you modify<br>
file(s) with this exception, you may extend this exception to your<br>
version of the file(s), but you are not obligated to do so. If you<br>
do not wish to do so, delete this exception statement from your<br>
version. If you delete this exception statement from all source<br>
files in the program, then also delete it here.<br>
=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91422010-03-20T05:04:35Znaruse (Yui NARUSE)naruse@airemix.jp
<ul></ul><p>=begin<br>
You can link openssl and Ruby's Licensed Ruby.<br>
=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91452010-03-20T05:08:14Zlucas (Lucas Nussbaum)lucas@lucas-nussbaum.net
<ul></ul><p>=begin<br>
But if we ship ruby under the terms of the ruby license, we are no longer allowed to link it to readline.<br>
=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91462010-03-20T05:29:43Znaruse (Yui NARUSE)naruse@airemix.jp
<ul></ul><p>=begin<br>
When you want to link openssl, you use Ruby's.<br>
When you want to link readline, you use GPL.<br>
=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91472010-03-20T05:32:58Zlucas (Lucas Nussbaum)lucas@lucas-nussbaum.net
<ul></ul><p>=begin<br>
I will see if that point of view works for the archive maintainers...<br>
=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91492010-03-20T05:54:41Znaruse (Yui NARUSE)naruse@airemix.jp
<ul></ul><p>=begin<br>
Linked exeption is useless because:</p>
<ul>
<li>for openssl you can use Ruby's</li>
<li>for both openssl and readline, readline's GPL2 infect Ruby<br>
=end</li>
</ul> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91512010-03-20T07:42:31Zcoatl (caleb clausen)
<ul></ul><p>=begin<br>
Unfortunately, I have no good suggestion as to how to get out of this mess. However, I want to make everyone aware that the problem is broader than is generally known. In addition to the readline extension, ruby ships with a gdbm extension. Gdbm is GPL (not LGPL) licensed, and so it presents exactly the same problem as readline. For all I know, there could be other licensing dragons lurking in ext/, but that was the only other one I could find when I went looking.</p>
<p>I agree with Yui that no change made to the license of ruby can make it more compatible than it is now. The most reasonable way out would be for the fsf to change readline and gdbm from GPL to LGPL licensing. I understand that's due to happen sometime after hell freezes over. The next best option seems to be for ruby to discontinue use of readline and gdbm.</p>
<p>How much effort would be needed to internationalize libedit?<br>
=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91712010-03-21T04:51:09Zzenspider (Ryan Davis)
<ul></ul><p>=begin</p>
<p>On Mar 19, 2010, at 15:42 , caleb clausen wrote:</p>
<blockquote>
<p>How much effort would be needed to internationalize libedit?</p>
</blockquote>
<p>Apparently this has already been done, but not released yet. Aaron found recent commits in their repo that look like they'll save us from this BS.</p>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91722010-03-21T05:25:24Zhramrach (Michal Suchanek)
<ul></ul><p>=begin<br>
On 20 March 2010 20:50, Ryan Davis <a href="mailto:ryand-ruby@zenspider.com" class="email">ryand-ruby@zenspider.com</a> wrote:</p>
<blockquote>
<p>On Mar 19, 2010, at 15:42 , caleb clausen wrote:</p>
<blockquote>
<p>How much effort would be needed to internationalize libedit?</p>
</blockquote>
<p>Apparently this has already been done, but not released yet. Aaron found recent commits in their repo that look like they'll save us from this BS.</p>
</blockquote>
<p>Changing to libedit makes this part of Ruby more usable I guess.</p>
<p>However, removing OpenSSL is really the way to go since there are<br>
multiple GPL extensions in Ruby and probably quite a few in gems as<br>
well. I am not sure why OpenSSL is incompatible with GPL but since<br>
FSF/Debian determined it is and they are really the ones behind GPL I<br>
guess it's better to avoid the combination.</p>
<p>Thanks</p>
<p>Michal</p>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91732010-03-21T05:38:21Zdarix (Marcus Rückert)darix@opensu.se
<ul></ul><p>=begin<br>
On 2010-03-21 05:25:01 +0900, Michal Suchanek wrote:</p>
<blockquote>
<p>On 20 March 2010 20:50, Ryan Davis <a href="mailto:ryand-ruby@zenspider.com" class="email">ryand-ruby@zenspider.com</a> wrote:</p>
<blockquote>
<p>On Mar 19, 2010, at 15:42 , caleb clausen wrote:</p>
<blockquote>
<p>How much effort would be needed to internationalize libedit?</p>
</blockquote>
<p>Apparently this has already been done, but not released yet. Aaron found recent commits in their repo that look like they'll save us from this BS.</p>
</blockquote>
<p>Changing to libedit makes this part of Ruby more usable I guess.</p>
<p>However, removing OpenSSL is really the way to go since there are<br>
multiple GPL extensions in Ruby and probably quite a few in gems as<br>
well. I am not sure why OpenSSL is incompatible with GPL but since<br>
FSF/Debian determined it is and they are really the ones behind GPL I<br>
guess it's better to avoid the combination.</p>
</blockquote>
<p>well if gnutls would be ready to replace it ....</p>
<p>GPL in general is problematic aswell, especially v3.</p>
<pre><code> darix
</code></pre>
<p>--<br>
openSUSE - SUSE Linux is my linux<br>
openSUSE is good for you<br>
<a href="http://www.opensuse.org" class="external">www.opensuse.org</a></p>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91752010-03-21T08:49:29Znobu (Nobuyoshi Nakada)nobu@ruby-lang.org
<ul><li><strong>Status</strong> changed from <i>Closed</i> to <i>Open</i></li><li><strong>ruby -v</strong> changed from <i>1.8</i> to <i>*</i></li></ul><p>=begin</p>
<p>=end</p> Ruby master - Feature #2982: Ruby tries to link with both openssl and readlinehttps://redmine.ruby-lang.org/issues/2982?journal_id=91772010-03-21T09:04:19Znobu (Nobuyoshi Nakada)nobu@ruby-lang.org
<ul><li><strong>Status</strong> changed from <i>Open</i> to <i>Third Party's Issue</i></li></ul><p>=begin</p>
<p>=end</p>