[libvirt] Core dump caused by misusing openssl in multithread scenario!

[Daniel P. Berrange]

On Mon, Oct 08, 2012 at 03:22:07PM +0100, Daniel P. Berrange wrote:
> On Sat, Oct 06, 2012 at 08:14:09PM +0200, Matthias Bolte wrote:
> > 2012/10/2 Benjamin Wang (gendwang) <gendwang at cisco.com>:
> > > Hi Daniel,
> > >    Is this problem fixed in the latest version? What about the question 2 which related to openssl callbacks in multi-thread?
> > 
> > As Daniel said, we cannot assume that libcurl was build with OpenSSL
> > backend. We would need some way to detect this first.
> > 
> > Also, wasn't there a license problem with OpenSSL and the (L)GPL? Can
> > libvirt legally be used with a libcurl that is linked with OpenSSL?
> 
> The OpenSSL vs GPL license compatibility is a subject of much debate
> amongst lawyers, so the answer you get depends on who you ask. IANAL,
> but my personal reading is that the OpenSSL license is *not* compatible
> with the (L)GPL. Thus as a libvirt copyright holder my position is that
> libvirt must only be used with a libcurl that links to either NSS or
> GNUTLS, and *not* OpenSSL.

Opps, and this time with the links that I meant to provide

  https://en.wikipedia.org/wiki/OpenSSL#Licensing
  http://people.gnome.org/~markmc/openssl-and-the-gpl.html
  http://lists.debian.org/debian-legal/2002/10/msg00113.html

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|