Bug 537437 (itextsharp)

Summary:	Review Request: itextsharp - Mono library for generating PDF files
Product:	[Fedora] Fedora	Reporter:	Kalev Lember <kalevlember>
Component:	Package Review	Assignee:	Nobody's working on this, feel free to take it <nobody>
Status:	CLOSED DEFERRED	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	erik-fedora, fedora-package-review, notting
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-07-02 20:22:39 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	537431
Bug Blocks:

Description Kalev Lember 2009-11-13 16:15:37 UTC

Spec URL: http://kalev.fedorapeople.org/itextsharp.spec
SRPM URL: http://kalev.fedorapeople.org/itextsharp-4.1.6-1.fc12.src.rpm
Description:
iText# (iTextSharp) is a port of the iText open source java library for PDF
generation, written entirely in C# for the .NET platform.

Comment 1 Kalev Lember 2009-12-10 21:50:21 UTC

There is a possible licensing problem. During mono-bouncycastle review it was discovered that mono-bouncycastle contains ASL 1.1 licensed code, which is incompatible with GPL. itextsharp contains code that is dual licensed under (LGPLv2+ or MPLv1.1). The problem is with LGPLv2+, which is not compatible with ASL 1.1. It might be possible that MPLv1.1 is compatible with ASL 1.1, but I couldn't find any references about that.

I wrote to bouncycastle csharp crypto mailing list [1] and filed a ticket with their bugtracking system [2], asking if they could relicense the ASL 1.1 code under ASL 2.0. It should certainly be possible to solve this issue, as the ASL 1.1 code in bouncycastle originates from the Apache ANT project, which has been subsequently relicened to ASL 2.0.

[1] http://www.bouncycastle.org/csharpdevmailarchive/msg00370.html
[2] http://www.bouncycastle.org/jira/browse/BJA-238

Comment 2 Kalev Lember 2010-07-02 20:22:39 UTC

The licensing problems should be solved now, but I'm no longer interested in this package.

Closing the ticket.