[Cryptech Tech] Command line interface

Peter Stuge peter at stuge.se
Tue May 3 20:28:42 UTC 2016


Rob Austein wrote:
> I think LGPL, while not great, is acceptable, in that it only
> requires users to give away source to libcli itself.

It requires enabling users to relink whatever is using libcli with a
different version of libcli.

(It also requires enabling users to make modifications for their own
use and to do reverse engineering to debug such modifications.)

See Section 6 and 6a of LGPL-2.1 for full wording. I find them clear.


> In particular, it does NOT GPL-contaminate everything to which it's
> linked.

Right, but the requirements still make it a showstopper for embedded
vendors not already prepared to venture into GPL-like-land.

Providing (at a minimum) a toolchain and linkable object files for
the entire libcli-using firmware to end users will not be acceptable
to many who have added value on top of what Cryptech delivers as a
starting point. Risking uptake for a CLI seems not worth it.

libcli can always be removed/replaced of course.


//Peter


More information about the Tech mailing list