Skip to content

fix: add debian/copyright.commercial for commercial .deb builds#10717

Closed
MarkAtwood wants to merge 3 commits into
wolfSSL:masterfrom
MarkAtwood:fix/debian-copyright-commercial
Closed

fix: add debian/copyright.commercial for commercial .deb builds#10717
MarkAtwood wants to merge 3 commits into
wolfSSL:masterfrom
MarkAtwood:fix/debian-copyright-commercial

Conversation

@MarkAtwood

@MarkAtwood MarkAtwood commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds commercial-license packaging metadata for .deb and .rpm builds.

The Jenkins packaging jobs run license.pl to replace source headers and COPYING with commercial text, but packaging metadata (debian/copyright, RPM spec License: field) was left unchanged, shipping GPL references in commercial packages.

Files added

  • debian/copyright.commercial -- DEP-5 format, declares wolfSSL-Commercial for wolfSSL code, preserves correct third-party attribution (NTT camellia, BLAKE2, Zephyr, m4 macros)
  • rpm/spec.in.commercial -- License: LicenseRef-wolfSSL-Commercial (SPDX custom identifier for proprietary), commercial description text

Both are drop-in replacements: the build pipeline copies them over the GPL originals after license.pl runs. Also adds previously missing blake2b.c/blake2s.c attribution (CC0-1.0, Samuel Neves).

Test plan

  • Corresponding wolfSSL/scripts#589 adds the license.pl swap logic
  • Neither file contains "GPL" or "General Public" (safe for license.pl post-build grep)

Copilot AI review requested due to automatic review settings June 17, 2026 17:28

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds a Debian machine-readable copyright file intended for commercial/FIPS .deb builds to avoid shipping GPL metadata, while preserving third‑party license attributions.

Changes:

  • Introduces debian/copyright.commercial as a drop-in replacement for commercial packaging.
  • Declares commercial wolfSSL licensing and retains upstream licenses for bundled third-party sources.
  • Adds attribution for BLAKE2 sources (CC0-1.0, Samuel Neves).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +210 to +226
License: BSD-3-Clause
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:
.
* Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
.
* Redistributions in binary form must reproduce the above
copyright notice, this list of conditions and the following disclaimer
in the documentation and/or other materials provided with the
distribution.
.
* The names of its contributors may not be used to endorse or
promote products derived from this software without specific prior
written permission.
.
Comment on lines +6 to +8
Files:
*
Copyright:
Free Software Foundation; either version 3 of the License, or (at your
option) any later version.
.
As a special exception, the respective Autoconf Macro's copyright owner
@@ -0,0 +1,243 @@
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: wolfssl
@MarkAtwood MarkAtwood requested a review from cconlon June 17, 2026 18:21
@MarkAtwood

Copy link
Copy Markdown
Contributor Author

Closing -- per Lealem's feedback, commercial packaging metadata should not live in the public wolfssl repo. The files have been moved to wolfSSL/scripts#589 where they live alongside the existing license templates.

@MarkAtwood MarkAtwood closed this Jun 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants