Bug 444426

Summary:	app-crypt/rainbowcrack: missing license
Product:	Gentoo Linux	Reporter:	Ulrich Müller <ulm>
Component:	New packages	Assignee:	Crypto team [DISABLED] <crypto+disabled>
Status:	RESOLVED FIXED
Severity:	normal	CC:	licenses, ssuominen
Priority:	Normal	Keywords:	UPSTREAM
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	436214

Description Ulrich Müller gentoo-dev

2012-11-23 11:51:18 UTC

Ebuilds claim LICENSE="as-is" which is definitely wrong.

- Version 1.2 contains only a warranty disclaimer in disclaimer.txt, but no
  license at all.
- Version 1.5 is binary-only, no license in zipball. Binaries contain the
  following string:
  "Copyright 2003-2010 RainbowCrack Project. All rights reserved."
  Bug 312497 comment #9 already says "unclear licensing".

Please sort out with upstream what are the license terms for this package.

Comment 1 Samuli Suominen (RETIRED) gentoo-dev

2012-11-23 11:54:27 UTC

I have mailed upstream (not now, but when adding 1.5) and all I got was a reply "OK"

I'll mail again...

Comment 2 Ulrich Müller gentoo-dev

2013-04-18 19:24:43 UTC

Ping. Any news here?

Comment 3 Samuli Suominen (RETIRED) gentoo-dev

2013-04-29 15:44:51 UTC

(In reply to comment #1)
> I have mailed upstream (not now, but when adding 1.5) and all I got was a
> reply "OK"
> 
> I'll mail again...

No reply whatsoever.  Lastrite?

Comment 4 Ulrich Müller gentoo-dev

2013-04-29 16:41:13 UTC

(In reply to comment #3)
> No reply whatsoever.  Lastrite?

What we could do:
- Change LICENSE to "all-rights-reserved"
- Add mirror and bindist restrictions

SRC_URI for version 1.2 appears to be dead. With mirror restriction in place, it must be updated. If this isn't possible, 1.2 needs to be removed.

Comment 5 Ulrich Müller gentoo-dev

2013-04-30 07:52:43 UTC

Maybe Free Rainbow Tables could be used as replacement? It's free software, licensed under GPL-2+ GPL-2 BSD openssl.

http://freerainbowtables.com/de/download/
http://gitorious.org/freerainbowtables-applications/freerainbowtables/blobs/master/LICENSE.txt

Comment 6 Samuli Suominen (RETIRED) gentoo-dev

2013-05-27 10:39:11 UTC

(In reply to Ulrich Müller from comment #4)
> (In reply to comment #3)
> > No reply whatsoever.  Lastrite?
> 
> What we could do:
> - Change LICENSE to "all-rights-reserved"
> - Add mirror and bindist restrictions
> 
> SRC_URI for version 1.2 appears to be dead. With mirror restriction in
> place, it must be updated. If this isn't possible, 1.2 needs to be removed.

LICENSE says now all-rights-reserved
RESTRICT says now bindist mirror
1.2* removed from tree

should be OK now