export of openssl from US _is_ legal

[Jonathan Larmour]

Luke Kenneth Casson Leighton wrote:
> On Tue, Jan 13, 2004 at 05:49:55PM +0100, Andrew Lunn wrote:
> 
>>On Tue, Jan 13, 2004 at 04:42:44PM +0000, Luke Kenneth Casson Leighton wrote:
>>
>>>dear ecos maintainers,
>>>
>>>your web site incorrectly says that the openssl port cannot be
>>>hosted on a US server.
>>>
>>>open source projects _can_ be exported from the US.
>>>
>>>what you need to do is to inform the US government of _where_
>>>the software can be obtained from.
>>>
>>>you need to do some research in order to find out the exact details.
>>
>>Sure, it can be done. The generic OpenSSL package does it, cygwin does
>>it. But as far as i know, its APITA to sort out. 
> 
> 
>  from what i understand, the notification - send an email - is
>  sufficient.

 From our discussions with lawyers who claimed to be experts on this, it 
unfortunately isn't that simple. It would be even harder to integrate it 
into CVS due to the terms of the BAXA rules on notification, so it de 
facto has to remain in an EPK anyway. Hosting it on a server outside the 
US rather than inside the US doesn't really lose us anything.

>>Also, how long before the US government changes there mind and adds
>>new restrictions? 
> 
>  cater for that by providing a non-us mirror?

Then people have to be told, links changed and invalidated, blahblah :-).

Jifl
-- 
eCosCentric    http://www.eCosCentric.com/    The eCos and RedBoot experts
--["No sense being pessimistic, it wouldn't work anyway"]-- Opinions==mine