7045697: JDK7 THIRD PARTY README update

[Jeff Dinkins]

Hi Andrew - sorry for the late response,

Looking at the ECC text, I agree that it's confusing - we're going to work on getting it tidied up.

> The above also speaks about removing binaries.  I didn't think binaries were
> allowed in the OpenJDK source trees?  I also didn't realise we were receiving
> any 'Oracle programs'.

This only applies to the Oracle products (JRE 7, JDK 7), not OpenJDK. I'll work with the right people to update the text to be clearer.

Likewise I'll see if we can rework the verbiage about "the Oracle license" and "Oracle programs".

As Kelly mentioned, in the past managing the TPRM has raised some questions, evidenced by some bugs such as in [1], and this was an effort to address some of that in parallel with some other general updates.

We realize based on your questions/concerns we didn't get it quite right and need to rework this (in the open) to get it exactly right.  Apologies, and thanks!

[1] http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=138


On Jul 12, 2011, at 6:34 AM, Andrew John Hughes wrote:
> On Tue, Jul 12, 2011 at 12:40:43PM +0200, Mark Wielaard wrote:
>> Hi,
>> 
>> Sorry for the late response, but I just stumbled upon:
>>> hg: jdk7/tl: 7045697: JDK7 THIRD PARTY README update
>>> Changeset: 93d2590fd849
>>> Author:    jeff
>>> Date:      2011-05-27 14:57 -0700
>>> URL:       http://hg.openjdk.java.net/jdk7/tl/rev/93d2590fd849
>>> 
>>> 7045697: JDK7 THIRD PARTY README update
>>> Reviewed-by: lana
>>> 
>>> ! THIRD_PARTY_README
>> 
>> Since this is a license update I wanted to double check, but the change
>> diff is somewhat hard to read. Sadly I couldn't find the mailinglist
>> this was discussed on, nor does the referenced bug report make clear
>> what exactly was fixed/changed. Could someone summarize the legal
>> updates, or point me to the correct mailing list archive discussion on
>> this changeset?
>> 
> 
> I also couldn't find any discussion on this either, and two of the
> dependent bugs are not visible.  Of particular concern is:
> 
> +
> +%% This notice is provided with respect to Elliptic Curve Cryptography, which
> +is included with JRE 7, JDK 7, and OpenJDK 7.
> +
> +You are receiving a copy of the Elliptic Curve Cryptography library in source
> +form with the JDK 7 source distribution and object code in the JRE 7 & JDK 7
> +runtime.
> +
> +The terms of the Oracle license do NOT apply to the Elliptic Curve
> +Cryptography library program; it is licensed under the following license,
> +separately from the Oracle programs you receive. If you do not wish to install
> +this program, you may delete the library named libsunec.so (on Solaris and
> +Linux systems) or sunec.dll (on Windows systems) from the JRE bin directory
> +reserved for native libraries. 
> 
> It is not completely clear that the 'Oracle license' is the lesser GPL 2.1
> that appears below; is this the case and could this not be stated explicitly
> in the text?
> 
> The above also speaks about removing binaries.  I didn't think binaries were
> allowed in the OpenJDK source trees?  I also didn't realise we were receiving
> any 'Oracle programs'.
> 
>> Thanks,
>> 
>> Mark
> 
> -- 
> Andrew :)
> 
> Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
> 
> Support Free Java!
> Contribute to GNU Classpath and IcedTea
> http://www.gnu.org/software/classpath
> http://icedtea.classpath.org
> PGP Key: F5862A37 (https://keys.indymedia.org/)
> Fingerprint = EA30 D855 D50F 90CD F54D  0698 0713 C3ED F586 2A37