dirmngr: GPLv2+, some files GPLv3+

[Petr Uzel]

Hello GnuPG developers,

Novell legal team found some inconsistencies in dirmngr licensing:
https://bugzilla.novell.com/show_bug.cgi?id=652989

Quoting the report:
=========================
The license of dirmngr claims to be GPLv2+. In the package the files
dirmngr-1.0.2.tar.bz2/dirmngr-1.0.2/doc/yat2m.c
dirmngr-1.0.2.tar.bz2/dirmngr-1.0.2/src/b64dec.c were found which are licensed
under the GPLv3+. In the case of doc/yat2m.c it looks as though the GPLv3
applies only to a standalone utility for converting text documents from one
form into another and so probably don't have an effect on the rest of the
package. However, the file src/b64dec.c may cause the entire resulting binary
to be licensed under the GPLv3.

Could you please comment on whether this is an intentional inclusion of GPLv3
by upstream? If so, we would need to look at the nature of interaction of the
GPLv3 file with the rest of the package. In any event, the presence of the
GPLv3 file should be clearly noted in the spec file (License: GPLv2+;GPLv3+)
and a copy of the GPLv3 should be included with the source (this should be done
anyway because of the standalone doc tool).
=========================

As far as I understand, the src/b64dec.c was imported from GnuPG, which is
GPLv3.

Shouldn't dirmngr license be switched to GPLv3 ?


Regards,

Petr

--
Petr Uzel
IRC: ptr_uzl @ freenode
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: </pipermail/attachments/20101115/734652f0/attachment.pgp>