The change in OpenSSL’s licensing
The change in OpenSSL’s licensing to the Apache License v2 (often referred to as ALv2) has several implications for businesses and developers. Here’s a breakdown:
Permissive Licensing: The Apache License v2 is a permissive open-source license. This means that the software can be freely used, modified, and distributed, even in proprietary applications, without the requirement to release the source code of the proprietary applications.
Patent Grants: ALv2 includes an explicit grant of patent rights from the contributors to the users. This benefits businesses as it reduces the risk of patent litigation from contributors.Redistribution Requirements: When redistributing the software, whether modified or not, the ALv2 requires:
- Inclusion of a copy of the license.
- Notice of any changes made to the code.
- Attribution to the original authors.
State Changes: If you modify and distribute the code, you must clearly state the changes you made. This ensures that recipients are aware of any alterations from the original version.
No Use of Trademarks: The ALv2 does not grant permission to use trademarks, logos, or product names associated with the software. This means businesses cannot claim their product is “OpenSSL” or use OpenSSL’s branding without separate permission, even if the product is built on OpenSSL.
No Warranty & Limitation of Liability: The ALv2 disclaims warranties and limits liabilities like many open-source licenses. This means businesses and developers use the software at their own risk.
Compatibility with Other Licenses: ALv2 is generally compatible with other licenses, including the GNU General Public License version 3 (GPLv3). However, it’s not compatible with GPLv2 unless additional permissions are granted.
Easier Adoption for Some Businesses: Some businesses and organizations have policies or legal concerns that make adopting software under specific licenses challenging. The shift to ALv2, a well-understood and widely accepted license, might make it easier for these entities to adopt or continue using OpenSSL.
In summary, the change to the Apache License v2 for OpenSSL provides more clarity and flexibility for businesses and developers, especially concerning patent rights and redistribution. However, as with any licensing change, businesses and developers must consult legal counsel to understand the full implications for their specific use cases.