[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#247427: ITP: elfsign -- ELF binary signing and verification utilities

On Wed, May 05, 2004 at 02:24:54PM +1000, Andrew Pollock wrote:
>   Package name    : elfsign
>   Version         : 0.2.0
>   Upstream Author : <mmiller@hick.org>
>   URL             : http://www.hick.org/code/skape/elfsign/
>   License         : Artistic
>   Description     : ELF binary signing and verification utilities
> This package provides a utility to add a digital signature to an ELF
> binary, and another utility to verify that signature. The current
> implementation uses PKI to sign the checksum of the binary. The benefits
> of doing this are are that it enables one to determine if a binary has
> been modified, and who created that binary.

The original Artistic license is not appropriate for licensing
anything that is not approximately perl, because of the way it is
worded. It is a terrible license. Do not use it. It's also highly
questionable as to whether things licensed under it can be included in
Debian, given the prohibitions on commercial distribution. Please ask
upstream to replace it with the Clarified Artistic license (or some
other free software license) before this is included in Debian.

  .''`.  ** Debian GNU/Linux ** | Andrew Suffield
 : :' :  http://www.debian.org/ |
 `. `'                          |
   `-             -><-          |

Attachment: signature.asc
Description: Digital signature

Reply to: