Openfire

Licence bug, migrate to GPLv3 ?

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Critical Critical
  • Resolution: Fixed
  • Affects Version/s: 3.6.4
  • Fix Version/s: 3.7.0
  • Component/s: None
  • Acceptance Test - Add?:
    No
  • Description:
    Hide

    src/web/plugin-admin.jsp is using packet org.apache.commons.fileupload
    This is located in these two libraries:

    • src/web/WEB-INF/lib/commons-fileupload.jar
    • src/web/WEB-INF/lib/commons-io.jar

    Both libraries include an LICENSE.txt which claims them as Apache License v2.0. Openfire itself is currently licensed under GnuGPLv2. According to wikipedia these two are not compatible! Migrating Openfire to GPLv3 would probably solve this problem. Another solution would be using other libraries.

    Also several plugins (clientControl, fastpath and userImportExport) are using an older commons-fileupload-1.0.jar, which claims to be Apache License v1.1. I found no information about this is compatible to GPLv2.

    See also this forums thread.

    Show
    src/web/plugin-admin.jsp is using packet org.apache.commons.fileupload This is located in these two libraries:
    • src/web/WEB-INF/lib/commons-fileupload.jar
    • src/web/WEB-INF/lib/commons-io.jar
    Both libraries include an LICENSE.txt which claims them as Apache License v2.0. Openfire itself is currently licensed under GnuGPLv2. According to wikipedia these two are not compatible! Migrating Openfire to GPLv3 would probably solve this problem. Another solution would be using other libraries. Also several plugins (clientControl, fastpath and userImportExport) are using an older commons-fileupload-1.0.jar, which claims to be Apache License v1.1. I found no information about this is compatible to GPLv2. See also this forums thread.
  • Environment:

    all

Activity

Hide
Martin Weusten added a comment - 10/15/08 08:37 PM

I am no lawyer but Todd Getz thinks also I'm are correct.

Show
Martin Weusten added a comment - 10/15/08 08:37 PM I am no lawyer but Todd Getz thinks also I'm are correct.
Hide
Martin Weusten added a comment - 10/15/08 08:48 PM

Jetty is also under Apache License v2.0

Show
Martin Weusten added a comment - 10/15/08 08:48 PM Jetty is also under Apache License v2.0
Hide
Daryl Herzmann added a comment - 11/13/08 05:35 AM

adjusting versions, this should be looked at IMHO. There is also another ticket along these lines from the debian folks

Show
Daryl Herzmann added a comment - 11/13/08 05:35 AM adjusting versions, this should be looked at IMHO. There is also another ticket along these lines from the debian folks
Hide
Daryl Herzmann added a comment - 01/07/10 01:17 AM

Marking this as fixed in next release with migration to AP2

Show
Daryl Herzmann added a comment - 01/07/10 01:17 AM Marking this as fixed in next release with migration to AP2

People

Dates

  • Created:
    10/15/08 08:35 PM
    Updated:
    01/31/10 09:02 PM
    Resolved:
    01/07/10 01:17 AM