Re: git-fetch in 1.5.4 fails versus 1.5.3.8

On Thu, Feb 07, 2008 at 01:01:09PM -0800, Linus Torvalds wrote:

On Thu, 7 Feb 2008, Jeff King wrote:

quoted

FWIW, this is not about OpenSSL for SHA1; it is about the underlying
library used by curl to do SSL (gnutls vs openssl).

My comment was about claiming "not distributable". That was simply not 
true. It's perfectly distributable, it's just Debian that has issues with 
OpenSSL (but then they shouldn't link it against curl either, so there 
seems to be some _other_ problem there too).

The curl license is very permissive, so there is no problem to link it
against any GPL program. OTOH, the OpenSSL is more restrictive than GPL,
and because GPL is copyleft (i.e. it prevents adding any restriction on
any derived work) to distribute Git linked against OpenSSL is technically
illegal unless OpenSSL is the part of the standard OS libraries or Git
developers provide a special exemption that allows to link Git against
OpenSSL and to redistribute the result. For more details, see
http://www.gnome.org/~markmc/openssl-and-the-gpl.html

Dmitry