[DISCUSS] Jetty 9.2 dependency licensing issues

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[DISCUSS] Jetty 9.2 dependency licensing issues

christopher.l.shannon
I'm working on upgrading to Jetty 9.2.x to fix:
https://issues.apache.org/jira/browse/AMQ-5356

Part of the upgrade requires updating dependencies for the servlet and jsp
jars. Jetty has two different versions of jsp implementations it is
supposed to work. The jetty-jsp works fine but I'm not sure if the
dependencies are compatible with Apache licensing.  Supposedly Jetty also
works with apache-jsp (which is Tomcat) but I've had lots of issues trying
to get it to work right.

I know we can't use GPL licensed dependencies but I think the dependencies
below are both GPL and CDDL.  Can we still use the dependencies since they
are also under CDDL or is that not allowed?

<dependency>
<groupId>javax.servlet</groupId>
<artifactId>javax.servlet-api</artifactId>
<version>3.1</version>
</dependency>
<dependency>
<groupId>javax.servlet.jsp</groupId>
<artifactId>javax.servlet.jsp-api</artifactId>
<version>2.3.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp</artifactId>
<version>2.3.2</version>
</dependency>
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp.jstl</artifactId>
<version>1.2.2</version>
</dependency>
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

christopher.l.shannon
Actually, re-reading the Apache guidance I'm not sure that CDDL can be
included either if the source is available.  So any guidance is appreciated
from anyone who has dealt with the licensing stuff before.

On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
[hidden email]> wrote:

> I'm working on upgrading to Jetty 9.2.x to fix:
> https://issues.apache.org/jira/browse/AMQ-5356
>
> Part of the upgrade requires updating dependencies for the servlet and jsp
> jars. Jetty has two different versions of jsp implementations it is
> supposed to work. The jetty-jsp works fine but I'm not sure if the
> dependencies are compatible with Apache licensing.  Supposedly Jetty also
> works with apache-jsp (which is Tomcat) but I've had lots of issues trying
> to get it to work right.
>
> I know we can't use GPL licensed dependencies but I think the dependencies
> below are both GPL and CDDL.  Can we still use the dependencies since they
> are also under CDDL or is that not allowed?
>
> <dependency>
> <groupId>javax.servlet</groupId>
> <artifactId>javax.servlet-api</artifactId>
> <version>3.1</version>
> </dependency>
> <dependency>
> <groupId>javax.servlet.jsp</groupId>
> <artifactId>javax.servlet.jsp-api</artifactId>
> <version>2.3.1</version>
> </dependency>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp</artifactId>
> <version>2.3.2</version>
> </dependency>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp.jstl</artifactId>
> <version>1.2.2</version>
> </dependency>
>
>
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

dkulp
CDDL is category B and can be used:

http://apache.org/legal/resolved.html#category-b


Dan



> On Aug 18, 2015, at 12:33 PM, Christopher Shannon <[hidden email]> wrote:
>
> Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> included either if the source is available.  So any guidance is appreciated
> from anyone who has dealt with the licensing stuff before.
>
> On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> [hidden email]> wrote:
>
>> I'm working on upgrading to Jetty 9.2.x to fix:
>> https://issues.apache.org/jira/browse/AMQ-5356
>>
>> Part of the upgrade requires updating dependencies for the servlet and jsp
>> jars. Jetty has two different versions of jsp implementations it is
>> supposed to work. The jetty-jsp works fine but I'm not sure if the
>> dependencies are compatible with Apache licensing.  Supposedly Jetty also
>> works with apache-jsp (which is Tomcat) but I've had lots of issues trying
>> to get it to work right.
>>
>> I know we can't use GPL licensed dependencies but I think the dependencies
>> below are both GPL and CDDL.  Can we still use the dependencies since they
>> are also under CDDL or is that not allowed?
>>
>> <dependency>
>> <groupId>javax.servlet</groupId>
>> <artifactId>javax.servlet-api</artifactId>
>> <version>3.1</version>
>> </dependency>
>> <dependency>
>> <groupId>javax.servlet.jsp</groupId>
>> <artifactId>javax.servlet.jsp-api</artifactId>
>> <version>2.3.1</version>
>> </dependency>
>> <dependency>
>> <groupId>org.glassfish.web</groupId>
>> <artifactId>javax.servlet.jsp</artifactId>
>> <version>2.3.2</version>
>> </dependency>
>> <dependency>
>> <groupId>org.glassfish.web</groupId>
>> <artifactId>javax.servlet.jsp.jstl</artifactId>
>> <version>1.2.2</version>
>> </dependency>
>>
>>

--
Daniel Kulp
[hidden email] - http://dankulp.com/blog
Talend Community Coder - http://coders.talend.com

Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

christopher.l.shannon
Dan,

The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we had
to use a geronimo version of it in Artemis.  Any idea why? For example,
this seems to apply to the servlet 3.1 spec jar that I listed and the fact
that we had to use a different jar file for jms 2.0 leads me to believe we
can't use the servlet 3.1 jar either.


On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <[hidden email]> wrote:

> CDDL is category B and can be used:
>
> http://apache.org/legal/resolved.html#category-b
>
>
> Dan
>
>
>
> > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> [hidden email]> wrote:
> >
> > Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> > included either if the source is available.  So any guidance is
> appreciated
> > from anyone who has dealt with the licensing stuff before.
> >
> > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > [hidden email]> wrote:
> >
> >> I'm working on upgrading to Jetty 9.2.x to fix:
> >> https://issues.apache.org/jira/browse/AMQ-5356
> >>
> >> Part of the upgrade requires updating dependencies for the servlet and
> jsp
> >> jars. Jetty has two different versions of jsp implementations it is
> >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> >> dependencies are compatible with Apache licensing.  Supposedly Jetty
> also
> >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> trying
> >> to get it to work right.
> >>
> >> I know we can't use GPL licensed dependencies but I think the
> dependencies
> >> below are both GPL and CDDL.  Can we still use the dependencies since
> they
> >> are also under CDDL or is that not allowed?
> >>
> >> <dependency>
> >> <groupId>javax.servlet</groupId>
> >> <artifactId>javax.servlet-api</artifactId>
> >> <version>3.1</version>
> >> </dependency>
> >> <dependency>
> >> <groupId>javax.servlet.jsp</groupId>
> >> <artifactId>javax.servlet.jsp-api</artifactId>
> >> <version>2.3.1</version>
> >> </dependency>
> >> <dependency>
> >> <groupId>org.glassfish.web</groupId>
> >> <artifactId>javax.servlet.jsp</artifactId>
> >> <version>2.3.2</version>
> >> </dependency>
> >> <dependency>
> >> <groupId>org.glassfish.web</groupId>
> >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> >> <version>1.2.2</version>
> >> </dependency>
> >>
> >>
>
> --
> Daniel Kulp
> [hidden email] - http://dankulp.com/blog
> Talend Community Coder - http://coders.talend.com
>
>
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

John D. Ament-2
For each Java Spec, The geronimo specs project within Geronimo is what's
responsible for generating the spec jar within ASF.  The exception is
servlet which is owned by Tomcat.  The JMS 2.0 JAR is apache licensed and a
pretty well working equivalent of the API JAR.

You can see what we did for Artemis to get it to use Servlet 3.1 from
Tomcat, but still run Jetty

https://github.com/apache/activemq-artemis/blob/master/pom.xml#L434

John

On Tue, Aug 18, 2015 at 1:20 PM Christopher Shannon <
[hidden email]> wrote:

> Dan,
>
> The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we had
> to use a geronimo version of it in Artemis.  Any idea why? For example,
> this seems to apply to the servlet 3.1 spec jar that I listed and the fact
> that we had to use a different jar file for jms 2.0 leads me to believe we
> can't use the servlet 3.1 jar either.
>
>
> On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <[hidden email]> wrote:
>
> > CDDL is category B and can be used:
> >
> > http://apache.org/legal/resolved.html#category-b
> >
> >
> > Dan
> >
> >
> >
> > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > [hidden email]> wrote:
> > >
> > > Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> > > included either if the source is available.  So any guidance is
> > appreciated
> > > from anyone who has dealt with the licensing stuff before.
> > >
> > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > [hidden email]> wrote:
> > >
> > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > >> https://issues.apache.org/jira/browse/AMQ-5356
> > >>
> > >> Part of the upgrade requires updating dependencies for the servlet and
> > jsp
> > >> jars. Jetty has two different versions of jsp implementations it is
> > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > >> dependencies are compatible with Apache licensing.  Supposedly Jetty
> > also
> > >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> > trying
> > >> to get it to work right.
> > >>
> > >> I know we can't use GPL licensed dependencies but I think the
> > dependencies
> > >> below are both GPL and CDDL.  Can we still use the dependencies since
> > they
> > >> are also under CDDL or is that not allowed?
> > >>
> > >> <dependency>
> > >> <groupId>javax.servlet</groupId>
> > >> <artifactId>javax.servlet-api</artifactId>
> > >> <version>3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>javax.servlet.jsp</groupId>
> > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > >> <version>2.3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp</artifactId>
> > >> <version>2.3.2</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > >> <version>1.2.2</version>
> > >> </dependency>
> > >>
> > >>
> >
> > --
> > Daniel Kulp
> > [hidden email] - http://dankulp.com/blog
> > Talend Community Coder - http://coders.talend.com
> >
> >
>
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

chirino
In reply to this post by christopher.l.shannon
We prefer ASL when it's available. That's whey we package Germino versions.

On Tuesday, August 18, 2015, Christopher Shannon <
[hidden email]> wrote:

> Dan,
>
> The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we had
> to use a geronimo version of it in Artemis.  Any idea why? For example,
> this seems to apply to the servlet 3.1 spec jar that I listed and the fact
> that we had to use a different jar file for jms 2.0 leads me to believe we
> can't use the servlet 3.1 jar either.
>
>
> On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <[hidden email]
> <javascript:;>> wrote:
>
> > CDDL is category B and can be used:
> >
> > http://apache.org/legal/resolved.html#category-b
> >
> >
> > Dan
> >
> >
> >
> > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > [hidden email] <javascript:;>> wrote:
> > >
> > > Actually, re-reading the Apache guidance I'm not sure that CDDL can be
> > > included either if the source is available.  So any guidance is
> > appreciated
> > > from anyone who has dealt with the licensing stuff before.
> > >
> > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > [hidden email] <javascript:;>> wrote:
> > >
> > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > >> https://issues.apache.org/jira/browse/AMQ-5356
> > >>
> > >> Part of the upgrade requires updating dependencies for the servlet and
> > jsp
> > >> jars. Jetty has two different versions of jsp implementations it is
> > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > >> dependencies are compatible with Apache licensing.  Supposedly Jetty
> > also
> > >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> > trying
> > >> to get it to work right.
> > >>
> > >> I know we can't use GPL licensed dependencies but I think the
> > dependencies
> > >> below are both GPL and CDDL.  Can we still use the dependencies since
> > they
> > >> are also under CDDL or is that not allowed?
> > >>
> > >> <dependency>
> > >> <groupId>javax.servlet</groupId>
> > >> <artifactId>javax.servlet-api</artifactId>
> > >> <version>3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>javax.servlet.jsp</groupId>
> > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > >> <version>2.3.1</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp</artifactId>
> > >> <version>2.3.2</version>
> > >> </dependency>
> > >> <dependency>
> > >> <groupId>org.glassfish.web</groupId>
> > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > >> <version>1.2.2</version>
> > >> </dependency>
> > >>
> > >>
> >
> > --
> > Daniel Kulp
> > [hidden email] <javascript:;> - http://dankulp.com/blog
> > Talend Community Coder - http://coders.talend.com
> >
> >
>


--
Hiram Chirino
Engineering | Red Hat, Inc.
[hidden email] | fusesource.com | redhat.com
skype: hiramchirino | twitter: @hiramchirino
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

christopher.l.shannon
Thanks John and Hiram.

I will use the Tomcat Serlvet and JSP api jars instead of the standard ones
since they are ASL.  That solves the problem for the API.

Are the other jars ok that I listed since they are CDDL?  These are the
actual implementation jars that Jetty uses for JSP/JSTL.

<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp</artifactId>
</dependency>
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.servlet.jsp.jstl</artifactId>
</dependency>


On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <[hidden email]>
wrote:

> We prefer ASL when it's available. That's whey we package Germino versions.
>
> On Tuesday, August 18, 2015, Christopher Shannon <
> [hidden email]> wrote:
>
> > Dan,
> >
> > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we
> had
> > to use a geronimo version of it in Artemis.  Any idea why? For example,
> > this seems to apply to the servlet 3.1 spec jar that I listed and the
> fact
> > that we had to use a different jar file for jms 2.0 leads me to believe
> we
> > can't use the servlet 3.1 jar either.
> >
> >
> > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <[hidden email]
> > <javascript:;>> wrote:
> >
> > > CDDL is category B and can be used:
> > >
> > > http://apache.org/legal/resolved.html#category-b
> > >
> > >
> > > Dan
> > >
> > >
> > >
> > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > > [hidden email] <javascript:;>> wrote:
> > > >
> > > > Actually, re-reading the Apache guidance I'm not sure that CDDL can
> be
> > > > included either if the source is available.  So any guidance is
> > > appreciated
> > > > from anyone who has dealt with the licensing stuff before.
> > > >
> > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > > [hidden email] <javascript:;>> wrote:
> > > >
> > > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > > >> https://issues.apache.org/jira/browse/AMQ-5356
> > > >>
> > > >> Part of the upgrade requires updating dependencies for the servlet
> and
> > > jsp
> > > >> jars. Jetty has two different versions of jsp implementations it is
> > > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > > >> dependencies are compatible with Apache licensing.  Supposedly Jetty
> > > also
> > > >> works with apache-jsp (which is Tomcat) but I've had lots of issues
> > > trying
> > > >> to get it to work right.
> > > >>
> > > >> I know we can't use GPL licensed dependencies but I think the
> > > dependencies
> > > >> below are both GPL and CDDL.  Can we still use the dependencies
> since
> > > they
> > > >> are also under CDDL or is that not allowed?
> > > >>
> > > >> <dependency>
> > > >> <groupId>javax.servlet</groupId>
> > > >> <artifactId>javax.servlet-api</artifactId>
> > > >> <version>3.1</version>
> > > >> </dependency>
> > > >> <dependency>
> > > >> <groupId>javax.servlet.jsp</groupId>
> > > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > > >> <version>2.3.1</version>
> > > >> </dependency>
> > > >> <dependency>
> > > >> <groupId>org.glassfish.web</groupId>
> > > >> <artifactId>javax.servlet.jsp</artifactId>
> > > >> <version>2.3.2</version>
> > > >> </dependency>
> > > >> <dependency>
> > > >> <groupId>org.glassfish.web</groupId>
> > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > > >> <version>1.2.2</version>
> > > >> </dependency>
> > > >>
> > > >>
> > >
> > > --
> > > Daniel Kulp
> > > [hidden email] <javascript:;> - http://dankulp.com/blog
> > > Talend Community Coder - http://coders.talend.com
> > >
> > >
> >
>
>
> --
> Hiram Chirino
> Engineering | Red Hat, Inc.
> [hidden email] | fusesource.com | redhat.com
> skype: hiramchirino | twitter: @hiramchirino
>
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

John D. Ament
Is activemq using JSPs?

On Tue, Aug 18, 2015 at 2:42 PM Christopher Shannon <
[hidden email]> wrote:

> Thanks John and Hiram.
>
> I will use the Tomcat Serlvet and JSP api jars instead of the standard ones
> since they are ASL.  That solves the problem for the API.
>
> Are the other jars ok that I listed since they are CDDL?  These are the
> actual implementation jars that Jetty uses for JSP/JSTL.
>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp</artifactId>
> </dependency>
> <dependency>
> <groupId>org.glassfish.web</groupId>
> <artifactId>javax.servlet.jsp.jstl</artifactId>
> </dependency>
>
>
> On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <[hidden email]>
> wrote:
>
> > We prefer ASL when it's available. That's whey we package Germino
> versions.
> >
> > On Tuesday, August 18, 2015, Christopher Shannon <
> > [hidden email]> wrote:
> >
> > > Dan,
> > >
> > > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like we
> > had
> > > to use a geronimo version of it in Artemis.  Any idea why? For example,
> > > this seems to apply to the servlet 3.1 spec jar that I listed and the
> > fact
> > > that we had to use a different jar file for jms 2.0 leads me to believe
> > we
> > > can't use the servlet 3.1 jar either.
> > >
> > >
> > > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <[hidden email]
> > > <javascript:;>> wrote:
> > >
> > > > CDDL is category B and can be used:
> > > >
> > > > http://apache.org/legal/resolved.html#category-b
> > > >
> > > >
> > > > Dan
> > > >
> > > >
> > > >
> > > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > > > [hidden email] <javascript:;>> wrote:
> > > > >
> > > > > Actually, re-reading the Apache guidance I'm not sure that CDDL can
> > be
> > > > > included either if the source is available.  So any guidance is
> > > > appreciated
> > > > > from anyone who has dealt with the licensing stuff before.
> > > > >
> > > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > > > [hidden email] <javascript:;>> wrote:
> > > > >
> > > > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > > > >> https://issues.apache.org/jira/browse/AMQ-5356
> > > > >>
> > > > >> Part of the upgrade requires updating dependencies for the servlet
> > and
> > > > jsp
> > > > >> jars. Jetty has two different versions of jsp implementations it
> is
> > > > >> supposed to work. The jetty-jsp works fine but I'm not sure if the
> > > > >> dependencies are compatible with Apache licensing.  Supposedly
> Jetty
> > > > also
> > > > >> works with apache-jsp (which is Tomcat) but I've had lots of
> issues
> > > > trying
> > > > >> to get it to work right.
> > > > >>
> > > > >> I know we can't use GPL licensed dependencies but I think the
> > > > dependencies
> > > > >> below are both GPL and CDDL.  Can we still use the dependencies
> > since
> > > > they
> > > > >> are also under CDDL or is that not allowed?
> > > > >>
> > > > >> <dependency>
> > > > >> <groupId>javax.servlet</groupId>
> > > > >> <artifactId>javax.servlet-api</artifactId>
> > > > >> <version>3.1</version>
> > > > >> </dependency>
> > > > >> <dependency>
> > > > >> <groupId>javax.servlet.jsp</groupId>
> > > > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > > > >> <version>2.3.1</version>
> > > > >> </dependency>
> > > > >> <dependency>
> > > > >> <groupId>org.glassfish.web</groupId>
> > > > >> <artifactId>javax.servlet.jsp</artifactId>
> > > > >> <version>2.3.2</version>
> > > > >> </dependency>
> > > > >> <dependency>
> > > > >> <groupId>org.glassfish.web</groupId>
> > > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > > > >> <version>1.2.2</version>
> > > > >> </dependency>
> > > > >>
> > > > >>
> > > >
> > > > --
> > > > Daniel Kulp
> > > > [hidden email] <javascript:;> - http://dankulp.com/blog
> > > > Talend Community Coder - http://coders.talend.com
> > > >
> > > >
> > >
> >
> >
> > --
> > Hiram Chirino
> > Engineering | Red Hat, Inc.
> > [hidden email] | fusesource.com | redhat.com
> > skype: hiramchirino | twitter: @hiramchirino
> >
>
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

christopher.l.shannon
Yeah, the web console (admin console) is. I'm running into all kinds of
issues trying to get it to work. I can get it to work in eclipse but the
JSP support keeps blowing up when trying to deploy the app.  I've been
trying different combinations of JSP, JSTL, etc jars to find the ones that
will work and that's when I saw the potential licensing issues.

So, still not sure which jars I need to get it working yet but at least
wanted to find out which ones are even eligible to use.

On Tue, Aug 18, 2015 at 3:20 PM, John D. Ament <[hidden email]>
wrote:

> Is activemq using JSPs?
>
> On Tue, Aug 18, 2015 at 2:42 PM Christopher Shannon <
> [hidden email]> wrote:
>
> > Thanks John and Hiram.
> >
> > I will use the Tomcat Serlvet and JSP api jars instead of the standard
> ones
> > since they are ASL.  That solves the problem for the API.
> >
> > Are the other jars ok that I listed since they are CDDL?  These are the
> > actual implementation jars that Jetty uses for JSP/JSTL.
> >
> > <dependency>
> > <groupId>org.glassfish.web</groupId>
> > <artifactId>javax.servlet.jsp</artifactId>
> > </dependency>
> > <dependency>
> > <groupId>org.glassfish.web</groupId>
> > <artifactId>javax.servlet.jsp.jstl</artifactId>
> > </dependency>
> >
> >
> > On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <[hidden email]>
> > wrote:
> >
> > > We prefer ASL when it's available. That's whey we package Germino
> > versions.
> > >
> > > On Tuesday, August 18, 2015, Christopher Shannon <
> > > [hidden email]> wrote:
> > >
> > > > Dan,
> > > >
> > > > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like
> we
> > > had
> > > > to use a geronimo version of it in Artemis.  Any idea why? For
> example,
> > > > this seems to apply to the servlet 3.1 spec jar that I listed and the
> > > fact
> > > > that we had to use a different jar file for jms 2.0 leads me to
> believe
> > > we
> > > > can't use the servlet 3.1 jar either.
> > > >
> > > >
> > > > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <[hidden email]
> > > > <javascript:;>> wrote:
> > > >
> > > > > CDDL is category B and can be used:
> > > > >
> > > > > http://apache.org/legal/resolved.html#category-b
> > > > >
> > > > >
> > > > > Dan
> > > > >
> > > > >
> > > > >
> > > > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
> > > > > [hidden email] <javascript:;>> wrote:
> > > > > >
> > > > > > Actually, re-reading the Apache guidance I'm not sure that CDDL
> can
> > > be
> > > > > > included either if the source is available.  So any guidance is
> > > > > appreciated
> > > > > > from anyone who has dealt with the licensing stuff before.
> > > > > >
> > > > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
> > > > > > [hidden email] <javascript:;>> wrote:
> > > > > >
> > > > > >> I'm working on upgrading to Jetty 9.2.x to fix:
> > > > > >> https://issues.apache.org/jira/browse/AMQ-5356
> > > > > >>
> > > > > >> Part of the upgrade requires updating dependencies for the
> servlet
> > > and
> > > > > jsp
> > > > > >> jars. Jetty has two different versions of jsp implementations it
> > is
> > > > > >> supposed to work. The jetty-jsp works fine but I'm not sure if
> the
> > > > > >> dependencies are compatible with Apache licensing.  Supposedly
> > Jetty
> > > > > also
> > > > > >> works with apache-jsp (which is Tomcat) but I've had lots of
> > issues
> > > > > trying
> > > > > >> to get it to work right.
> > > > > >>
> > > > > >> I know we can't use GPL licensed dependencies but I think the
> > > > > dependencies
> > > > > >> below are both GPL and CDDL.  Can we still use the dependencies
> > > since
> > > > > they
> > > > > >> are also under CDDL or is that not allowed?
> > > > > >>
> > > > > >> <dependency>
> > > > > >> <groupId>javax.servlet</groupId>
> > > > > >> <artifactId>javax.servlet-api</artifactId>
> > > > > >> <version>3.1</version>
> > > > > >> </dependency>
> > > > > >> <dependency>
> > > > > >> <groupId>javax.servlet.jsp</groupId>
> > > > > >> <artifactId>javax.servlet.jsp-api</artifactId>
> > > > > >> <version>2.3.1</version>
> > > > > >> </dependency>
> > > > > >> <dependency>
> > > > > >> <groupId>org.glassfish.web</groupId>
> > > > > >> <artifactId>javax.servlet.jsp</artifactId>
> > > > > >> <version>2.3.2</version>
> > > > > >> </dependency>
> > > > > >> <dependency>
> > > > > >> <groupId>org.glassfish.web</groupId>
> > > > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
> > > > > >> <version>1.2.2</version>
> > > > > >> </dependency>
> > > > > >>
> > > > > >>
> > > > >
> > > > > --
> > > > > Daniel Kulp
> > > > > [hidden email] <javascript:;> - http://dankulp.com/blog
> > > > > Talend Community Coder - http://coders.talend.com
> > > > >
> > > > >
> > > >
> > >
> > >
> > > --
> > > Hiram Chirino
> > > Engineering | Red Hat, Inc.
> > > [hidden email] | fusesource.com | redhat.com
> > > skype: hiramchirino | twitter: @hiramchirino
> > >
> >
>
Reply | Threaded
Open this post in threaded view
|

Re: [DISCUSS] Jetty 9.2 dependency licensing issues

christopher.l.shannon
I did some more research and it looks like Jetty 9.2.x and above now
defaults to the apache-jsp (tomcat) implementation.  This is actually ideal
as it would take care of the licensing issues.  So I'm going to go ahead
and stick with that version.  I had a couple of issues getting that
implementation to work but I think it's just a config issue and I have a
couple of ideas on how to fix it.

Thanks for the help everyone.



On Tue, Aug 18, 2015 at 3:59 PM, Christopher Shannon <
[hidden email]> wrote:

> Yeah, the web console (admin console) is. I'm running into all kinds of
> issues trying to get it to work. I can get it to work in eclipse but the
> JSP support keeps blowing up when trying to deploy the app.  I've been
> trying different combinations of JSP, JSTL, etc jars to find the ones that
> will work and that's when I saw the potential licensing issues.
>
> So, still not sure which jars I need to get it working yet but at least
> wanted to find out which ones are even eligible to use.
>
> On Tue, Aug 18, 2015 at 3:20 PM, John D. Ament <[hidden email]>
> wrote:
>
>> Is activemq using JSPs?
>>
>> On Tue, Aug 18, 2015 at 2:42 PM Christopher Shannon <
>> [hidden email]> wrote:
>>
>> > Thanks John and Hiram.
>> >
>> > I will use the Tomcat Serlvet and JSP api jars instead of the standard
>> ones
>> > since they are ASL.  That solves the problem for the API.
>> >
>> > Are the other jars ok that I listed since they are CDDL?  These are the
>> > actual implementation jars that Jetty uses for JSP/JSTL.
>> >
>> > <dependency>
>> > <groupId>org.glassfish.web</groupId>
>> > <artifactId>javax.servlet.jsp</artifactId>
>> > </dependency>
>> > <dependency>
>> > <groupId>org.glassfish.web</groupId>
>> > <artifactId>javax.servlet.jsp.jstl</artifactId>
>> > </dependency>
>> >
>> >
>> > On Tue, Aug 18, 2015 at 1:28 PM, Hiram Chirino <[hidden email]>
>> > wrote:
>> >
>> > > We prefer ASL when it's available. That's whey we package Germino
>> > versions.
>> > >
>> > > On Tuesday, August 18, 2015, Christopher Shannon <
>> > > [hidden email]> wrote:
>> > >
>> > > > Dan,
>> > > >
>> > > > The jms 2.0 api jar is also CDDL (as well as GPL) but it looks like
>> we
>> > > had
>> > > > to use a geronimo version of it in Artemis.  Any idea why? For
>> example,
>> > > > this seems to apply to the servlet 3.1 spec jar that I listed and
>> the
>> > > fact
>> > > > that we had to use a different jar file for jms 2.0 leads me to
>> believe
>> > > we
>> > > > can't use the servlet 3.1 jar either.
>> > > >
>> > > >
>> > > > On Tue, Aug 18, 2015 at 12:41 PM, Daniel Kulp <[hidden email]
>> > > > <javascript:;>> wrote:
>> > > >
>> > > > > CDDL is category B and can be used:
>> > > > >
>> > > > > http://apache.org/legal/resolved.html#category-b
>> > > > >
>> > > > >
>> > > > > Dan
>> > > > >
>> > > > >
>> > > > >
>> > > > > > On Aug 18, 2015, at 12:33 PM, Christopher Shannon <
>> > > > > [hidden email] <javascript:;>> wrote:
>> > > > > >
>> > > > > > Actually, re-reading the Apache guidance I'm not sure that CDDL
>> can
>> > > be
>> > > > > > included either if the source is available.  So any guidance is
>> > > > > appreciated
>> > > > > > from anyone who has dealt with the licensing stuff before.
>> > > > > >
>> > > > > > On Tue, Aug 18, 2015 at 11:57 AM, Christopher Shannon <
>> > > > > > [hidden email] <javascript:;>> wrote:
>> > > > > >
>> > > > > >> I'm working on upgrading to Jetty 9.2.x to fix:
>> > > > > >> https://issues.apache.org/jira/browse/AMQ-5356
>> > > > > >>
>> > > > > >> Part of the upgrade requires updating dependencies for the
>> servlet
>> > > and
>> > > > > jsp
>> > > > > >> jars. Jetty has two different versions of jsp implementations
>> it
>> > is
>> > > > > >> supposed to work. The jetty-jsp works fine but I'm not sure if
>> the
>> > > > > >> dependencies are compatible with Apache licensing.  Supposedly
>> > Jetty
>> > > > > also
>> > > > > >> works with apache-jsp (which is Tomcat) but I've had lots of
>> > issues
>> > > > > trying
>> > > > > >> to get it to work right.
>> > > > > >>
>> > > > > >> I know we can't use GPL licensed dependencies but I think the
>> > > > > dependencies
>> > > > > >> below are both GPL and CDDL.  Can we still use the dependencies
>> > > since
>> > > > > they
>> > > > > >> are also under CDDL or is that not allowed?
>> > > > > >>
>> > > > > >> <dependency>
>> > > > > >> <groupId>javax.servlet</groupId>
>> > > > > >> <artifactId>javax.servlet-api</artifactId>
>> > > > > >> <version>3.1</version>
>> > > > > >> </dependency>
>> > > > > >> <dependency>
>> > > > > >> <groupId>javax.servlet.jsp</groupId>
>> > > > > >> <artifactId>javax.servlet.jsp-api</artifactId>
>> > > > > >> <version>2.3.1</version>
>> > > > > >> </dependency>
>> > > > > >> <dependency>
>> > > > > >> <groupId>org.glassfish.web</groupId>
>> > > > > >> <artifactId>javax.servlet.jsp</artifactId>
>> > > > > >> <version>2.3.2</version>
>> > > > > >> </dependency>
>> > > > > >> <dependency>
>> > > > > >> <groupId>org.glassfish.web</groupId>
>> > > > > >> <artifactId>javax.servlet.jsp.jstl</artifactId>
>> > > > > >> <version>1.2.2</version>
>> > > > > >> </dependency>
>> > > > > >>
>> > > > > >>
>> > > > >
>> > > > > --
>> > > > > Daniel Kulp
>> > > > > [hidden email] <javascript:;> - http://dankulp.com/blog
>> > > > > Talend Community Coder - http://coders.talend.com
>> > > > >
>> > > > >
>> > > >
>> > >
>> > >
>> > > --
>> > > Hiram Chirino
>> > > Engineering | Red Hat, Inc.
>> > > [hidden email] | fusesource.com | redhat.com
>> > > skype: hiramchirino | twitter: @hiramchirino
>> > >
>> >
>>
>
>