problematic pkcs11 license

Dalibor Topic dalibor.topic at
Thu May 13 14:46:25 UTC 2021

Hi Matthias,

I would suggest to bring up licensing concerns about OASIS headers to 
the OASIS PKCS 11 TC directly, which is co-chaired by Red Hat, afaict 
from .

The issue of concerns seems to come up very rarely on the TC mailing 
list, as far as I can tell from threads like . But I think they would be 
in a much better position to clarify the aspects Debian has an issue 
with than I could, for example.

dalibor topic

On 27.04.2021 08:33, Matthias Klose wrote:
> A Debian issue points out a problematic license for some imported header files,
> see, and also
> pointing out the issue with the OASIS license.
> The header files currently have
> /* Copyright (c) OASIS Open 2016-2019. All Rights Reserved.
>   * Distributed under the terms of the OASIS IPR Policy,
>   * [], AS-IS, WITHOUT ANY
>   * PARTICULAR PURPOSE or NONINFRINGEMENT of the rights of others.
>   */
> The proposed alternative headers from NSS (which is already used as a build
> dependency for OpenJDK), have:
> /* This Source Code Form is subject to the terms of the Mozilla Public
>   * License, v. 2.0. If a copy of the MPL was not distributed with this
>   * file, You can obtain one at */
> /*
>   * Copyright (C) 1994-1999 RSA Security Inc. Licence to copy this document
>   * is granted provided that it is identified as "RSA Security In.c Public-Key
>   * Cryptography Standards (PKCS)" in all material mentioning or referencing
>   * this document.
>   *
>   * The latest version of this header can be found at:
>   *
>   */
> Is this something which could be addressed upstream? Which group to contact?
> Thanks, Matthias

<> Dalibor Topic
Consulting Product Manager
Phone: +494089091214 <tel:+494089091214>, Mobile: +491737185961
<tel:+491737185961>, Video: dalibor.topic at
<sip:dalibor.topic at>

Oracle Global Services Germany GmbH
Hauptverwaltung: Riesstr. 25, D-80992 München
Registergericht: Amtsgericht München, HRB 246209
Geschäftsführer: Ralf Herrmann

More information about the jdk-dev mailing list