Question about RSA licence

[ludovic.rousseau@free.fr]

Hello, please Cc: me on replies,

The opensc package includes rsaref headers [0] from RSA. The RSA disclaimer has
been
added in a new upstream version [1] and should be included in a next Debian
opensc package.

The RSA disclaimer is [2]:

 " Regarding the header / include files:

    License to copy and use this software is granted provided that it is
identified as "RSA Security Inc. PKCS #11 Cryptographic Token Interface
(Cryptoki)" in all material mentioning or referencing this software or this
function.

    License is also granted to make and use derivative works provided that such
works are identified as "derived from the RSA Security Inc. PKCS #11
Cryptographic Token Interface (Cryptoki)" in all material mentioning or
referencing the derived work.

    This software is provided �AS IS� and RSA Security, Inc. disclaims all
warranties including but not limited to the implied warranty of
merchantability, fitness for a particular purpose, and noninfringement. "

I found a reference to a similar licence in [3] about the md5 implementation
from RSA. But I did not find an explanation about if or why it was non-free.

My questions:
- is this licence DFSG compliant? I would say yes but the (re)distribution right
is not explicitely given.

- is this licence GPL compatible? I would say no since it has the same problem
than the original BSD licence [4].

Thanks,

[0] http://www.rsasecurity.com/rsalabs/node.asp?id=2133
[1] http://www.opensc.org/opensc/browser/trunk/src/pkcs11/rsaref/
[2] http://www.rsasecurity.com/rsalabs/node.asp?id=2133#disclaimer
[3] http://lists.debian.org/debian-legal/2005/02/msg00110.html
[4] http://www.fsf.org/licensing/licenses/index_html#OriginalBSD

--
Ludovic Rousseau                           Ludovic.Rousseau@free.fr
-- Normaliser Unix c'est comme pasteuriser le Camembert, L.R. --