Terracotta Discussion Forums (LEGACY READ-ONLY ARCHIVE)

Hi,

I'm looking for EHCache server, and I'm especially interested in the offered secured web service API ("Security" paragraph in this article http://ehcache.org/documentation/cache_server.html).
But after looking the security proposal, I'm surprised by the choice of XWSS, because this technology is a sub project of the Sun Metro project, and mainly is covered by a dual CDDL + GPL V2 license. But EHCache server is covered by the Apache V2 license and theorically, it should be under GPL v2 license (please refer to this good description http://en.wikipedia.org/wiki/GNU_General_Public_License and retain that a derivated work is ambiguous and potentially applicable to EHCache server because the XWSS librairy is embedded in your product)

.

Thus, are you aware about that? Do you plan to replace the XWSS librairie?

Thanks for your enquiry. That code is not licensed under the GPL, but rather the CDDL (Sun Microsystems permits redistributors to pick their license). So therefore there are no GPL virality issues.

I am going to run this past our legal team to confirm.

On the XWSS project page (https://xwss.dev.java.net/), the license is CDDL and GPL V2. Here is the link of the official CDDL & GPL v2 licenses: https://glassfish.dev.java.net/public/CDDL+GPL.html. Then I think these two licenses must covered both the XWSS product.

However Sun has added a section named ""CLASSPATH" EXCEPTION TO THE GPL VERSION 2". But on the XWSS project page, there is no reference to this classpath exception. Then I've browse the CVS code of XWSS (https://xwss.dev.java.net/source/browse/xwss/repo/com.sun.xml.wss/), and here is the source file header:

/*
* The contents of this file are subject to the terms
* of the Common Development and Distribution License
* (the License). You may not use this file except in
* compliance with the License.
*
* You can obtain a copy of the license at
* https://glassfish.dev.java.net/public/CDDLv1.0.html.
* See the License for the specific language governing
* permissions and limitations under the License.
*
* When distributing Covered Code, include this CDDL
* Header Notice in each file and include the License file
* at https://glassfish.dev.java.net/public/CDDLv1.0.html.
* If applicable, add the following below the CDDL Header,
* with the fields enclosed by brackets [] replaced by
* you own identifying information:
* "Portions Copyrighted [year] [name of copyright owner]"
*
* Copyright 2006 Sun Microsystems Inc. All Rights Reserved
*/

The Classpath exeption has not been explicitly mentionned in the source file header... BUT we discover that the source file header do not mention that the product is covered by the dual license! But only by the CDDL license.

In short, source file header are not coherent with the license announced on the project web site....

Any idea?

Hi lcotonea,

It looks as though you're misinterpreting what "dual license" means. Sun makes the XWSS code available under either the CDDL, or the GPL, via its download page. The end user is permitted to select which license governs. The ehcache server is governed by the CDDL. Hope that clarifies it for you.

regards,
Tim McIntyre
Terracotta Inc.

It's clear now.

Thank you for your support!

regards

L. Cotonéa

It seems the issue is resolved , Please let know if need more information.