Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-15874

Add Bouncy Castle License

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Won't Fix
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None
    • Target Version/s:

      Description

      Compiling HBase against Hadoop trunk tells me Bouncy Castle license is used.

      This product includes Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs licensed under the Bouncy Castle Licence.

      ERROR: Please check ^^^^^^^^^^^^ this License for acceptability here:

      https://www.apache.org/legal/resolved

      If it is okay, then update the list named 'non_aggregate_fine' in the LICENSE.vm file.
      If it isn't okay, then revert the change that added the dependency.

      More info on the dependency:

      <groupId>org.bouncycastle</groupId>
      <artifactId>bcpkix-jdk15on</artifactId>
      <version>1.60</version>

      maven central search
      g:org.bouncycastle AND a:bcpkix-jdk15on AND v:1.60

      project website
      http://www.bouncycastle.org/java.html
      project source
      https://github.com/bcgit/bc-java

      According to the project website, Bouncy Castle License is the same as MIT license.
      https://www.bouncycastle.org/licence.html

      Please note this should be read in the same way as the MIT license.

      Shall we seek Apache Software Foundation's legal advice? Per ASF legal, Bouncy Castle is not listed as an includable license: https://www.apache.org/legal/resolved#category-a

      Not sure why it only surfaced in Hadoop trunk (aka branch 3.3) since Bouncy Castle was included long time ago. Maybe a recent change made by Robert Kanter in YARN-8857 updated the version and changed the license?

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                weichiu Wei-Chiu Chuang
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: