VW 7.8 and SSL

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

VW 7.8 and SSL

squeakman
Greetings,

I just downloaded the VW 7.8.1 non commercial and I see that the SSL
package has been stubbed out.  There is some type of note that looks
like '1984'ish doublespeak about US gov restrictions.

Is there a way to get around this situation?

Thanks,
Frank


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

jarober
if you have the previous release - 7.7.1 or 7.8 - you can just grab the entire "Security" directory from there and use that.


On Aug 1, 2012, at 11:59 AM, squeakman wrote:

> Greetings,
>
> I just downloaded the VW 7.8.1 non commercial and I see that the SSL
> package has been stubbed out.  There is some type of note that looks
> like '1984'ish doublespeak about US gov restrictions.
>
> Is there a way to get around this situation?
>
> Thanks,
> Frank
>
>
> _______________________________________________
> vwnc mailing list
> [hidden email]
> http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

James Robertson
http://www.jarober.com
[hidden email]




_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

squeakman
On 01/08/2012 12:07 PM, James Robertson wrote:
> if you have the previous release - 7.7.1 or 7.8 - you can just grab the entire "Security" directory from there and use that.
>
>

Thanks, that worked for me.  But what is the plan if one did not have a
previous release?

Also, I suspect that Java continues to provide SSL support, if true then
how is it that the same restrictions on US export does not apply to the
Java world?  Just curious.

Regards,
Frank


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

Sean Glazier
http://www.blackducksoftware.com/media/_wp/SEEC-Guide.pdf
is a link to A PDF describing it. Basically Sun asked mother May I to the government and they said sure you can and when Cincom did the same thing they said absolutely not. They imposed more draconian restriction on Cincom than they did Sun. This is perfectly legal because the Government can and does discriminate. 
 
Kind Regards
 
Sean Glazier
 
Light yourself on Fire with enthusiasm and people will come for miles to watch you burn!



On Thu, Aug 2, 2012 at 3:05 PM, squeakman <[hidden email]> wrote:
On 01/08/2012 12:07 PM, James Robertson wrote:
> if you have the previous release - 7.7.1 or 7.8 - you can just grab the entire "Security" directory from there and use that.
>
>

Thanks, that worked for me.  But what is the plan if one did not have a
previous release?

Also, I suspect that Java continues to provide SSL support, if true then
how is it that the same restrictions on US export does not apply to the
Java world?  Just curious.

Regards,
Frank


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

Boris Popov, DeepCove Labs (SNN)
In my mind, it would have been better from the start to just add a dependency on OpenSSL libraries (which exist for all major platforms) instead of rolling native Smalltalk implementations avoiding this issue altogether. There may be some downside to this that I hadn't considered?

-Boris

On 2012-08-02, at 9:46, "Sean Glazier" <[hidden email]> wrote:

http://www.blackducksoftware.com/media/_wp/SEEC-Guide.pdf
is a link to A PDF describing it. Basically Sun asked mother May I to the government and they said sure you can and when Cincom did the same thing they said absolutely not. They imposed more draconian restriction on Cincom than they did Sun. This is perfectly legal because the Government can and does discriminate. 
 
Kind Regards
 
Sean Glazier
 
Light yourself on Fire with enthusiasm and people will come for miles to watch you burn!



On Thu, Aug 2, 2012 at 3:05 PM, squeakman <[hidden email]> wrote:
On 01/08/2012 12:07 PM, James Robertson wrote:
> if you have the previous release - 7.7.1 or 7.8 - you can just grab the entire "Security" directory from there and use that.
>
>

Thanks, that worked for me.  But what is the plan if one did not have a
previous release?

Also, I suspect that Java continues to provide SSL support, if true then
how is it that the same restrictions on US export does not apply to the
Java world?  Just curious.

Regards,
Frank


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

Sean Glazier
Hi,

That would not have mattered. Also openSSL at the time was not everywhere and also it has bugs. I know I found quite a few. but even if your code simply calls and API it becomes yours in the mind of the government and you must ask.
 
Kind Regards
 
Sean Glazier
 
Light yourself on Fire with enthusiasm and people will come for miles to watch you burn!



On Thu, Aug 2, 2012 at 3:49 PM, Boris Popov, DeepCove Labs <[hidden email]> wrote:
In my mind, it would have been better from the start to just add a dependency on OpenSSL libraries (which exist for all major platforms) instead of rolling native Smalltalk implementations avoiding this issue altogether. There may be some downside to this that I hadn't considered?

-Boris

On 2012-08-02, at 9:46, "Sean Glazier" <[hidden email]> wrote:

http://www.blackducksoftware.com/media/_wp/SEEC-Guide.pdf
is a link to A PDF describing it. Basically Sun asked mother May I to the government and they said sure you can and when Cincom did the same thing they said absolutely not. They imposed more draconian restriction on Cincom than they did Sun. This is perfectly legal because the Government can and does discriminate. 
 
Kind Regards
 
Sean Glazier
 
Light yourself on Fire with enthusiasm and people will come for miles to watch you burn!



On Thu, Aug 2, 2012 at 3:05 PM, squeakman <[hidden email]> wrote:
On 01/08/2012 12:07 PM, James Robertson wrote:
> if you have the previous release - 7.7.1 or 7.8 - you can just grab the entire "Security" directory from there and use that.
>
>

Thanks, that worked for me.  But what is the plan if one did not have a
previous release?

Also, I suspect that Java continues to provide SSL support, if true then
how is it that the same restrictions on US export does not apply to the
Java world?  Just curious.

Regards,
Frank


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

jarober
In reply to this post by squeakman
You'll have to ask Cincom.  I don't understand the legal issues involved well enough to even speculate.


On Aug 2, 2012, at 9:05 AM, squeakman wrote:

> On 01/08/2012 12:07 PM, James Robertson wrote:
>> if you have the previous release - 7.7.1 or 7.8 - you can just grab the entire "Security" directory from there and use that.
>>
>>
>
> Thanks, that worked for me.  But what is the plan if one did not have a
> previous release?
>
> Also, I suspect that Java continues to provide SSL support, if true then
> how is it that the same restrictions on US export does not apply to the
> Java world?  Just curious.
>
> Regards,
> Frank
>
>
> _______________________________________________
> vwnc mailing list
> [hidden email]
> http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

James Robertson
http://www.jarober.com
[hidden email]




_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

Boris Popov, DeepCove Labs (SNN)
I've given up on trying to understand the reasoning; the bottom line: it
is what it is and it may or may not get any better in the future.

-Boris


-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On
Behalf Of James Robertson
Sent: Thursday, August 02, 2012 10:43 AM
To: VWNC NC
Subject: Re: [vwnc] VW 7.8 and SSL

You'll have to ask Cincom.  I don't understand the legal issues involved
well enough to even speculate.


On Aug 2, 2012, at 9:05 AM, squeakman wrote:

> On 01/08/2012 12:07 PM, James Robertson wrote:
>> if you have the previous release - 7.7.1 or 7.8 - you can just grab
the entire "Security" directory from there and use that.

>>
>>
>
> Thanks, that worked for me.  But what is the plan if one did not have
> a previous release?
>
> Also, I suspect that Java continues to provide SSL support, if true
> then how is it that the same restrictions on US export does not apply
> to the Java world?  Just curious.
>
> Regards,
> Frank
>
>
> _______________________________________________
> vwnc mailing list
> [hidden email]
> http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

James Robertson
http://www.jarober.com
[hidden email]




_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc
Reply | Threaded
Open this post in threaded view
|

Re: VW 7.8 and SSL

Sean Glazier
The government have changed the policy 9 times ranging from having it only for banking and military apps to "sure release what you want" to "opps terrorist might use encryption so you can't export anything unless we say so" and it keeps changing almost yearly. 

Some folks who mistakenly thought that using open source meant you did not need to ask have gotten fined or jailed and these days even worse can happen to you. 

It never was about logic, it was and still is about control and having to ask Government for permission for everything, including living these days.

It will only get worse and is not limited to encryption software.
 
Kind Regards
 
Sean Glazier
 
Light yourself on Fire with enthusiasm and people will come for miles to watch you burn!



On Thu, Aug 2, 2012 at 4:46 PM, Boris Popov, DeepCove Labs <[hidden email]> wrote:
I've given up on trying to understand the reasoning; the bottom line: it
is what it is and it may or may not get any better in the future.

-Boris


-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On
Behalf Of James Robertson
Sent: Thursday, August 02, 2012 10:43 AM
To: VWNC NC
Subject: Re: [vwnc] VW 7.8 and SSL

You'll have to ask Cincom.  I don't understand the legal issues involved
well enough to even speculate.


On Aug 2, 2012, at 9:05 AM, squeakman wrote:

> On 01/08/2012 12:07 PM, James Robertson wrote:
>> if you have the previous release - 7.7.1 or 7.8 - you can just grab
the entire "Security" directory from there and use that.
>>
>>
>
> Thanks, that worked for me.  But what is the plan if one did not have
> a previous release?
>
> Also, I suspect that Java continues to provide SSL support, if true
> then how is it that the same restrictions on US export does not apply
> to the Java world?  Just curious.
>
> Regards,
> Frank
>
>
> _______________________________________________
> vwnc mailing list
> [hidden email]
> http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

James Robertson
http://www.jarober.com
[hidden email]




_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc

_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc


_______________________________________________
vwnc mailing list
[hidden email]
http://lists.cs.uiuc.edu/mailman/listinfo/vwnc