[Oval-devel] New version of oval-interpreter 5.7.1 introduce possible-gpl-code-linked-with-openssl warning

[Pavel Vinogradov]

  Hello.

I'm just work on packaging latest oval-interpreter version 5.7.1 to
include in Debian.
This version will fix serious bug #548460

New version of ovaldi introduce dependency on libssl package. This
dependency is used in Digest.[h|cpp] code.
During lintian check i get warning:

    This package appears to be covered by the GNU GPL but depends on
the OpenSSL libssl package and does not mention a license exemption or
exception for OpenSSL in its copyright file. The GPL (including
version 3) is incompatible with some terms of the OpenSSL license, and
therefore Debian does not allow GPL-licensed code linked with OpenSSL
libraries unless there is a license exception explicitly permitting
this.

    If only the Debian packaging, or some other part of the package
not linked with OpenSSL, is covered by the GNU GPL, please add a
lintian override for this tag. Lintian currently has no good way of
distinguishing between that case and problematic packages.

    Severity: serious, Certainty: wild-guess

Did anybody have any suggestion about fixing this issue or i must
escalate this issue to official oval-devel maillist?

ps: Latest version of oval-debian is available in svn:
svn://svn.debian.org/svn/oval/trunk/ovaldi

-- 
Pavel Vinogradov
NixDev.Net, Open Source Developer