David.Turing's blog

 

Apache License更适合中国人

Apache License更适合中国人,正式迎接Wayer Grant的挑战

很久以前,我开始着手写一些基于Security的插件,由于我使用Eclipse,Eclipse插件似乎本身对我很有帮助,我在从事插件开发的同时,只是写一些很简单的基于BouncyCastle的工具类。有一天,我看到了Portecle, 它是KeytoolGUI的一个分支,我觉得它的功能跟KeyStore 2.4大同小异,版权信息表明,2004年以后Wayne Grant并没有再参与此软件的任何开发。
Copyright © 2004 Wayne Grant
            2004 Mark Majczyk
            2004-2005 Ville Skyttä
我着手在Protecle和KeytoolGUI的基础上编写一个安全插件,名为SecureX。Protecle和KeytoolGUI是基于Swing,我编写了一个跟他们几乎很相像的SWT使用界面(当然不少地方作了增强),我希望使用上述的copyright来发布该Eclipse插件,我这样想的理由有两个:

第一,SecureX不只是集成KeytoolGUI这个证书管理模块,而且还会集成签名,加密等模块,这样,我们将来开发界面应用的时候,我们开源队伍可以同步开发,只要我们按照Eclipse RCP规范,我们不存在任何的集成问题。
第二,SecureX不希望使用GPL,而想使用Apache License。但由于Wayne Grant多次警告,如果我relicense(使用了他的代码于SecureX,并将SecureX重新定位于Apache License),他将对我采取法律行动。其实,GPL跟Apache License的最大区别是,GPL要求修改代码必须也遵守GPL,也就是说,如果我屈服于wayne, 将SecureX应用了GPL,其他人将无法将SecureX应用于商业用途,除非他们承诺他们的商业软件遵循GPL,你说可能吗:) 相比之下,Apache License更自由,它强调使用源代码的人不需要公开自己的源代码(修改后的源代码),也就是说,如果SecureX使用Apache License,SecureX的用户可以任意修改它,并且可以选择以源代码的方式或者二进制代码的方式发布他们自己的成果(他们唯一需要做的是——在他们的成果中声明使用了SecureX的代码).

我第一次向Wayne发邮件,邀请他他的回信如下:

Hello David,

Some guidance for you.

I have copyright over KeyTool GUI.  You therefore cannot call your
application "KeyTool GUI" or anything similar.  Lazgo Software has copyright
and trademark over "KeyStore Explorer" so you cannot call it that either.

KeyTool GUI is GPL software.  If your application contains code from KeyTool
GUI then your application as a whole must obey the GPL license.  This means
that you must release your own code as GPL and not under any other license
terms.  The headers in the existing code must be left how you found them -
that is with the GPL license and my copyright intact.

I have no wish to be listed as author of your application.  Simply state on
your web site and in the application that your application is based on a
fork of KeyTool GUI of which I am the copyright owner.  For an example see
the Portecle web site (
http://portecle.sourceforge.net/) - Portecle is
similar to your app in that it is a fork of KeyTool GUI.

Let me know if you have any questions.

- Wayne.

----------------------------------

Dear Waner Grant:
   I've written a Keytool Eclipse Plugin which support most features of KeyStore
2.4.
   As you know, KeyStore 2.4 is written in Swing, I rewirte your
application by SWT.
So that it has a native look and more, I integrate my XML signature module
in this
application.
   For more info, see
http://dev2dev.bea.com.cn/bbs/thread.jspa?forumID=29304&threadID=31955&tstart=0
   And i will publish this Eclipse Plugin in next two weeks. Becasue wanner
Grant
is the first author of this software, So I plan to use his name as first
author and mine
as the second author.  Will this be reasonable?
   Any Advice