Please clarify licening information

[xnox]

• https://github.com/opencryptoki/openssl-ibmpkcs11/blob/master/COPYING

Appears to be an empty file, please provide contents or remove this file. If this file was added to simply pacify autotools, maybe using AM_INIT_AUTOMAKE([foreign]) option is a better way to remove the autotools warnings. Ditto other empty files, e.g. NEWS, AUTHORS.

• https://github.com/opencryptoki/openssl-ibmpkcs11/blob/master/LICENSE

Has an odd copyright statement, and license. My understanding is that the OpenSSL project is not the copyright holder, but IBM is. Also OpenSSL project is undergoing a license transition to Apache v2, thus the OpenSSL license is no longer preferred license for the upstream project. Have you considered relicensing under Apache v2? Is that even possible?

Also I am failing to find any source files, that are supposedly covered by the LICENSE text.

• https://github.com/opencryptoki/openssl-ibmpkcs11/blob/master/src/e_pkcs11.c
• https://github.com/opencryptoki/openssl-ibmpkcs11/blob/master/src/e_pkcs11_err.c
• https://github.com/opencryptoki/openssl-ibmpkcs11/blob/master/src/include/e_pkcs11.h
• https://github.com/opencryptoki/openssl-ibmpkcs11/blob/master/src/include/e_pkcs11_err.h

Above files do not appear to have any license mentioned at the top of the file in a comment header. By default, that implies that these are proprietary.

[dodys]

Hi Dimitri,

Thanks for your feedback.

openssl-ibmpkcs11 is a rather old project with OpenSSL license. As you can see the state right now of some files are not as it should. But we didn't touch those files for now since we are moving on to relicensing this code as Apache v2.

We have all the changes you mentioned that are needed (based on relicensing under Apache v2) stored locally but we cannot make it public it as we are still hitting some legal approvals. So this relicensed version won't make into Ubuntu 18.04.