Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 444426 - app-crypt/rainbowcrack: missing license
Summary: app-crypt/rainbowcrack: missing license
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Crypto team [DISABLED]
URL:
Whiteboard:
Keywords: UPSTREAM
Depends on:
Blocks: as-is-license
  Show dependency tree
 
Reported: 2012-11-23 11:51 UTC by Ulrich Müller
Modified: 2013-05-27 10:39 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ulrich Müller gentoo-dev 2012-11-23 11:51:18 UTC
Ebuilds claim LICENSE="as-is" which is definitely wrong.

- Version 1.2 contains only a warranty disclaimer in disclaimer.txt, but no
  license at all.
- Version 1.5 is binary-only, no license in zipball. Binaries contain the
  following string:
  "Copyright 2003-2010 RainbowCrack Project. All rights reserved."
  Bug 312497 comment #9 already says "unclear licensing".

Please sort out with upstream what are the license terms for this package.
Comment 1 Samuli Suominen (RETIRED) gentoo-dev 2012-11-23 11:54:27 UTC
I have mailed upstream (not now, but when adding 1.5) and all I got was a reply "OK"

I'll mail again...
Comment 2 Ulrich Müller gentoo-dev 2013-04-18 19:24:43 UTC
Ping. Any news here?
Comment 3 Samuli Suominen (RETIRED) gentoo-dev 2013-04-29 15:44:51 UTC
(In reply to comment #1)
> I have mailed upstream (not now, but when adding 1.5) and all I got was a
> reply "OK"
> 
> I'll mail again...

No reply whatsoever.  Lastrite?
Comment 4 Ulrich Müller gentoo-dev 2013-04-29 16:41:13 UTC
(In reply to comment #3)
> No reply whatsoever.  Lastrite?

What we could do:
- Change LICENSE to "all-rights-reserved"
- Add mirror and bindist restrictions

SRC_URI for version 1.2 appears to be dead. With mirror restriction in place, it must be updated. If this isn't possible, 1.2 needs to be removed.
Comment 5 Ulrich Müller gentoo-dev 2013-04-30 07:52:43 UTC
Maybe Free Rainbow Tables could be used as replacement? It's free software, licensed under GPL-2+ GPL-2 BSD openssl.

http://freerainbowtables.com/de/download/
http://gitorious.org/freerainbowtables-applications/freerainbowtables/blobs/master/LICENSE.txt
Comment 6 Samuli Suominen (RETIRED) gentoo-dev 2013-05-27 10:39:11 UTC
(In reply to Ulrich Müller from comment #4)
> (In reply to comment #3)
> > No reply whatsoever.  Lastrite?
> 
> What we could do:
> - Change LICENSE to "all-rights-reserved"
> - Add mirror and bindist restrictions
> 
> SRC_URI for version 1.2 appears to be dead. With mirror restriction in
> place, it must be updated. If this isn't possible, 1.2 needs to be removed.

LICENSE says now all-rights-reserved
RESTRICT says now bindist mirror
1.2* removed from tree

should be OK now