Comment 7 for bug 12605

Message-ID: <email address hidden>
Date: Mon, 7 Feb 2005 13:11:14 +0000
From: Andrew Suffield <email address hidden>
To: <email address hidden>, <email address hidden>
Subject: Re: Bug#293932: profile.py has non-free license

--VbJkn9YxBvnuCH5J
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Feb 07, 2005 at 01:27:55PM +0100, Matthias Klose wrote:
> debian-legal, how do other packages handle the md5 stuff?
>=20
> Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All
> rights reserved.
>=20
> License to copy and use this software is granted provided that it
> is identified as the "RSA Data Security, Inc. MD5 Message-Digest
> Algorithm" in all material mentioning or referencing this software
> or this function.
>=20
> License is also granted to make and use derivative works provided
> that such works are identified as "derived from the RSA Data
> Security, Inc. MD5 Message-Digest Algorithm" in all material
> mentioning or referencing the derived work.
>=20
> RSA Data Security, Inc. makes no representations concerning either
> the merchantability of this software or the suitability of this
> software for any particular purpose. It is provided "as is"
> without express or implied warranty of any kind.
>=20
> These notices must be retained in any copies of any part of this
> documentation and/or software.

This is the copy of md5.c fished out of the specification. We've seen
it before.

There are other variations of md5.c, at least one of which has either
a BSD or an MIT license, I forget which. Look around, you should find
one easily enough. They're more or less equivalent, you may have to
fiddle the function names.

--=20
  .''`. ** Debian GNU/Linux ** | Andrew Suffield
 : :' : http://www.debian.org/ |
 `. `' |
   `- -><- |

--VbJkn9YxBvnuCH5J
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCB2jylpK98RSteX8RAuyoAJ9EgoVOorWgSpxMUwSOOtUjnfi12ACgkOej
FWkuwkQvDvPtoj01nes9qwc=
=skon
-----END PGP SIGNATURE-----

--VbJkn9YxBvnuCH5J--