[CentOS-devel] Export licensing for crypto

Fri Aug 11 17:06:18 UTC 2017
Karsten Wade <kwade at redhat.com>

On 08/10/2017 01:08 PM, Thomas F Herbert wrote:
> +Ed Warnicke

Hi Ed! Are you on this mailing list?

> Karsten, thanks for your quick response.
> 
> I hope I have answered your question below.

Tom, thanks, makes sense what you are asking. I've asked the question
from the Right People and will get back to you ASAP.

- Karsten

> On 08/09/2017 12:05 AM, Karsten Wade wrote:
>> On 08/08/2017 04:30 PM, Thomas F Herbert wrote:
>>> Vpp package includes an accelerated software IPSecusing the multi-buffer
>>> library.
>>>
>>> My understanding is that due to US law, since this is a separate
>>> implementation from OpenSSL, It requires an export license.
>>>
>>> We are covered upstream through Linux foundation.
>>>
>>> Does Centos.org hold an export license for crypto?
>>>
>>> Is this a question for the Centos board?
>> Perhaps, but it depends on a bit more clarity. I'd have to know a bit
>> more about this specific case & can ask our friendly export compliance
>> folks.
>>
>> That said, the distro is distributed with the Export Control
>> Classification Number (ECCN) for/from RHEL:
>>
>> https://wiki.centos.org/ECCN
>>
>> The gray area we might be in here is if the Vpp package is not in the
>> upstream distro. Can you give more background on where it's derived from?
> Karsten,
> I don't understand your question that "...the VPP package is not in the
> upstream distro."
> If there is any other information that the board needs to help in the
> decision please let me know.
> 
> I have added some more information below about the vpp project and the
> multi-buffer crypto project and links to source code and upstream rpm
> repos.
> 
> More information about fd.io and the vpp project:
> https://wiki.fd.io/view/VPP
> The vpp upstream source code is here:
> https://gerrit.fd.io/r/#/admin/projects/vpp,branches
> VPP packages upstream are here:
> https://nexus.fd.io/content/repositories/fd.io.stable.1707.centos7/io/fd/vpp/
> 
> Currently vpp upstream is built  with a multi-buffer library tarball for
> the multi-buffer library from 01.org.
> The upstream source for the multi-buffer library linked with VPP is
> here: https://github.com/01org/intel-ipsec-mb
> We are planning to build RPMs for the multi-buffer library in this
> upstream project: https://wiki.fd.io/view/Rpm_dpdk,
> and https://gerrit.fd.io/r/#/admin/projects/rpm_dpdk,branches
> <https://gerrit.fd.io/r/gitweb?p=rpm_dpdk.git;a=tree;h=refs/heads/master;hb=refs/heads/master>
> 
> 
> I am also adding Ed Warnicke who worked with Linux Foundation for export
> license for VPP for use of the multi-buffer library.
> 
> Thanks,
> --Tom
>>
>> - Karsten
>>
>>
>> _______________________________________________
>> CentOS-devel mailing list
>> CentOS-devel at centos.org
>> https://lists.centos.org/mailman/listinfo/centos-devel
> 

-- 
Karsten Wade
Community Infrastructure Team : https://osci.io
Red Hat Open Source and Standards (OSAS) : @redhatopen
@quaid gpg: AD0E0C41

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20170811/2965a21e/attachment-0008.sig>