Open Source PKI

From Dogtag

Contents

Overview

Licensing determines what rights you have to use this software in both binary and source form. The Dogtag Certificate System is made up of a number of different pieces of software, each with their own licensing. Each of these licenses is described below. And we must say, of course, that this document should not be taken as legal advice. Talk to your attorney.

Certificate System Licensing

The Dogtag Certificate System is made up a few different pieces of code. These include:

Certificate System Core

This is the bulk of the code. This is available under a GPL license created for this project. You can read the license on the license text] page.

Token Processing System

There are Apache modules used by the Token Processing System. They are licensed under the LGPL.

Smartcard Manager Client

There is a client associated with the Token Processing System that is licensed under the GPL.

NSPR / NSS / LDAPSDK

Since these come from mozilla.org, this code is licensed under an MPL/LGPL/GPL tri-license. See the mozilla.org MPL pages for more information on the MPL.

Dogtag Certificate System Packages

To determine what licenses are attached to what packages, cd to an RPM repository, and execute the following command:

   % find . -name *rpm | xargs rpm -qp --queryformat '%{NAME} --> %{LICENSE}\n' | sort | uniq
   dogtag-pki-ca-ui --> GPLv2 with exceptions
   dogtag-pki-common-ui --> GPLv2 with exceptions
   dogtag-pki-console-ui --> GPLv2 with exceptions
   dogtag-pki-kra-ui --> GPLv2 with exceptions
   dogtag-pki-ocsp-ui --> GPLv2 with exceptions
   dogtag-pki-ra-ui --> GPLv2 with exceptions
   dogtag-pki-tks-ui --> GPLv2 with exceptions
   dogtag-pki-tps-ui --> GPLv2 with exceptions
   osutil --> GPLv2 with exceptions
   pki-ca --> GPLv2 with exceptions
   pki-common --> GPLv2 with exceptions
   pki-common-javadoc --> GPLv2 with exceptions
   pki-console --> GPLv2 with exceptions
   pki-java-tools --> GPLv2 with exceptions
   pki-java-tools-javadoc --> GPLv2 with exceptions
   pki-kra --> GPLv2 with exceptions
   pki-manage --> GPLv2 with exceptions  (NOTE:  The 'pki-manage' RPM has been 'deprecated' on Fedora platforms in favor of 'yum' and 'yum-utils'!)
   pki-migrate --> GPLv2 with exceptions
   pki-native-tools --> GPLv2 with exceptions
   pki-ocsp --> GPLv2 with exceptions
   pki-ra --> GPLv2 with exceptions
   pki-selinux --> GPLv2 with exceptions
   pki-setup --> GPLv2 with exceptions
   pki-silent --> GPLv2 with exceptions
   pki-symkey --> GPLv2 with exceptions
   pki-tks --> GPLv2 with exceptions
   pki-tps --> LGPLv2 with exceptions
   pki-util --> GPLv2 with exceptions
   pki-util-javadoc --> GPLv2 with exceptions
   tomcatjss --> LGPL