Skip to content

fix: update debian/copyright to GPL-3+ and add missing attributions#10719

Open
MarkAtwood wants to merge 2 commits into
wolfSSL:masterfrom
MarkAtwood:fix/debian-copyright-gplv3
Open

fix: update debian/copyright to GPL-3+ and add missing attributions#10719
MarkAtwood wants to merge 2 commits into
wolfSSL:masterfrom
MarkAtwood:fix/debian-copyright-gplv3

Conversation

@MarkAtwood

@MarkAtwood MarkAtwood commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

Summary

The debian/copyright file was out of date in several ways:

  • GPL-2+ -> GPL-3+: wolfSSL has been GPL-3.0 (per COPYING) but debian/copyright still declared GPL-2+
  • camellia.c/h license: NTT's code is BSD-2-Clause per its own header, not GPL -- was incorrectly declared as GPL-2+
  • Missing blake2b.c/blake2s.c: Samuel Neves' BLAKE2 reference code is CC0-1.0, never listed
  • Missing visibility.m4: FSF copyright, FSFAP license, never listed
  • Copyright year: updated 2023 -> 2026
  • debian/ stanza*: added wolfSSL Inc. 2024-2026 alongside original Felix Lechner attribution

No code changes -- metadata only.

Test plan

  • lintian on built .deb shows no incorrect-source-license or missing-license-paragraph warnings

- wolfSSL license is GPL-3+, not GPL-2+ (matches COPYING)
- camellia.c/h: NTT code is BSD-2-Clause, not GPL
- Add missing blake2b.c/blake2s.c (CC0-1.0, Samuel Neves)
- Add missing visibility.m4 (FSFAP, FSF)
- Update copyright year range to 2026
Copilot AI review requested due to automatic review settings June 17, 2026 17:44

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Refresh Debian DEP-5 licensing metadata to align with upstream licensing and ensure all bundled third-party sources/macros are properly attributed.

Changes:

  • Update primary package licensing from GPL-2+ to GPL-3+ and refresh wolfSSL copyright years.
  • Add missing Files: stanzas and license paragraphs for Camellia (NTT BSD-2-Clause), BLAKE2 (CC0-1.0), and m4/visibility.m4 (FSFAP).
  • Normalize license identifiers / formatting (e.g., BSD-3-Clause, fixed email bracket), and extend debian/* attribution.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread debian/copyright
Comment on lines 239 to +248
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.


License: Apache-2.0
On modern Debian systems, the text of this license can be found
at: /usr/share/common-licenses/Apache-2.0
On Debian systems, the complete text of the Apache License version 2.0
can be found in "/usr/share/common-licenses/Apache-2.0".

License: FSFAP
Copying and distribution of this file, with or without modification, are
permitted in any medium without royalty provided the copyright notice
Comment thread debian/copyright
Comment on lines +12 to +17
Files:
wolfcrypt/src/camellia.c
wolfssl/wolfcrypt/camellia.h
Copyright:
2006-2007 NTT (Nippon Telegraph and Telephone Corporation)
License: NTT-BSD-2-Clause
@MarkAtwood MarkAtwood requested review from cconlon, dgarske and wolfSSL-Bot and removed request for dgarske June 17, 2026 18:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants