Bug 875542

Summary:	dev-libs/libgcrypt has incorrect LICENSE
Product:	Gentoo Linux	Reporter:	ganooslashlinus
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	base-system, gentoo, jstein, licenses
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Other
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=698326 https://bugs.gentoo.org/show_bug.cgi?id=641160
Whiteboard:
Package list:		Runtime testing required:	---

Description ganooslashlinus 2022-10-05 22:53:47 UTC

All ebuilds list: LICENSE="LGPL-2.1 MIT"

Most of the library part is under LGPL-2.1+ and the helper programs are under the GPLv2+: https://www.gnupg.org/related_software/libgcrypt/

I checked and MIT expat does apply to cipher/idea.c

Also, the LICENSES file lists the other licenses that certain parts are under.
In that file, I see:
- BSD_3Clause
- A permissive license from intel.
- Modified BSD-3-clause with an option to distribute under the terms of the GPL instead.
- Custom permissive license with an option to distribute under the terms of the GPL instead.
- The X11 license
- Public domain
- The OCB license version 1

Comment 1 Hanno Böck gentoo-dev

2022-12-05 07:15:43 UTC

The OCB license is a license allowing the algorithm to be used in opensource code. Two notes about this:

* The shipped OCB code itself is LGPL, and I think we usually consider LICENSE to cover the code copyright and not the patent situation.

* This is largely obsolete, as Philipp Rogaway has declared that he has abandoned the OCB patents and there are no more restrictions on implementing OCB:
https://mailarchive.ietf.org/arch/msg/cfrg/qLTveWOdTJcLn4HP3ev-vrj05Vg/