From 7c694d90ac84e63f41cb315dff46721e8d224e35 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Igor=20Gali=C4=87?=
The mod_ssl v1 package was initially created in April 1998 by Ralf S. Engelschall via porting Ben Laurie's Apache-SSL 1.17 source patches for - Apache 1.2.6 to Apache 1.3b6. Because of conflicts with Ben - Laurie's development cycle it then was re-assembled from scratch for - Apache 1.3.0 by merging the old mod_ssl 1.x with the newer Apache-SSL - 1.18. From this point on mod_ssl lived its own life as mod_ssl v2. The - first publicly released version was mod_ssl 2.0.0 from August 10th, - 1998.
- -After US export restrictions on cryptographic software were
- loosened,
First, let us explain what Wassenaar and its Arrangement on - Export Controls for Conventional Arms and Dual-Use Goods and - Technologies is: This is a international regime, established in 1995, to - control trade in conventional arms and dual-use goods and technology. It - replaced the previous CoCom regime. Further details on - both the Arrangement and its signatories are available at http://www.wassenaar.org/.
- -In short, the aim of the Wassenaar Arrangement is to prevent the build up - of military capabilities that threaten regional and international security - and stability. The Wassenaar Arrangement controls the export of - cryptography as a dual-use good, that is, something that has both military and - civilian applications. However, the Wassenaar Arrangement also provides an - exemption from export controls for mass-market software and free software.
- -In the current Wassenaar List of Dual Use Goods and Technologies And
- Munitions, under GENERAL SOFTWARE NOTE (GSN)
it says
- The Lists do not control "software" which is either: 1. [...] 2. "in
- the public domain".
And under DEFINITIONS OF TERMS USED IN
- THESE LISTS
we find In the public
- domain
defined as "technology" or "software" which has been made
- available without restrictions upon its further dissemination. Note:
- Copyright restrictions do not remove "technology" or "software" from being
- "in the public domain".
So, both mod_ssl and OpenSSL are in the public domain
for the purposes
- of the Wassenaar Arrangement and its List of Dual Use Goods and
- Technologies And Munitions List
, and thus not affected by its provisions.