Re: SHA, MD, and openssl

[Rüdiger Sonderfeld]

On Sunday 08 December 2013 13:01:40 Paul Eggert wrote:
> As for as license, Emacs is linking against a library
> that is normally distributed with the major components of
> the operating system, so that part of the GPL applies.

The license comments on gnu.org explicitly say, it is not compatible with the 
GPL

>     The license of OpenSSL is a conjunction of two licenses, one of them
>     being the license of SSLeay. You must follow both. The combination
>     results in a copyleft free software license that is incompatible with
>     the GNU GPL. It also has an advertising clause like the original BSD
>     license and the Apache 1 license.
>     
>     We recommend using GNUTLS instead of OpenSSL in software you write.
>     However, there is no reason not to use OpenSSL and applications that
>     work with OpenSSL.

https://www.gnu.org/licenses/license-list.html#OpenSSL

That would mean distributions like Debian would not be able to ship Emacs with 
OpenSSL support.  E.g., Debian's git package does not support SSL because of 
this problem.  Using GNUTLS would also make more sense because it is already 
an (optional) dependency of Emacs.

Regards,
Rüdiger