Hi Ciaran, VeraCrypt uses both licenses. This also complies with the TrueCrypt license. This 'based on TrueCrypt' is required by the TrueCrypt license (III.1.3). It is a derivative work. I think the question is, if it is NonFree in the opinion of SUSE. Markus Am 2015-01-27 12:33, schrieb Ciaran Farrell:
Hi,
I took a quick look now. The MS-PL is fine for Factory but you rightly pointed out that the TrueCrypt license is not.
What I can't immediately see is the relationship between VeraCrypt and TrueCrypt. The VeraCrypt website does say it is 'based on' TrueCrypt, but what is that supposed to mean from a copyright perspective? If VeraCrypt is a derivative work of TrueCrypt, then it must comply with the terms in the TrueCrypt license for derivative works. If it doesn't, it is in violation of those license terms and we can certainly not distribute it.
Is there any way of telling what is meant by 'based on TrueCrypt'?
Ciaran
On 27/01/15 12:23, Markus Kolb wrote:
Am 2015-01-23 09:51, schrieb Markus Kolb:
Hello,
I'd like to package VeraCrypt [https://veracrypt.codeplex.com]. It's license is MS-PL [https://veracrypt.codeplex.com/license] but based on TrueCrypt license [https://veracrypt.codeplex.com/wikipage?title=VeraCrypt%20License].
I've requested [https://build.opensuse.org/request/show/282383] maintenance for https://build.opensuse.org/project/show/security:privacy:veracrypt and got told to ask/discuss it here.
I think some people may miss a software to open "TrueCrypts Volumes" and its features. Up to openSUSE 13.1 there has been the realcrypt package for this purpose. I don't know why realcrypt isn't longer available. Maybe it was only a renamed package with TrueCrypt sources and became insecure.
VeraCrypt is a successor of TrueCrypt with many fixes and more secure cryptology.
So what do you think?
I know the TrueCrypt license is too restricted to become an FSF free software license. So is it possible to bundle the package with openSUSE? In security:privacy:veracrypt? Or in openSUSE:Factory:NonFree?
Anyone reading this? Any comments on this?
Thx
-- To unsubscribe, e-mail: opensuse-bar+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-bar+owner@opensuse.org