license switch agpl -> busl1, sprints work, new product advisories
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
# Crypto Compliance Review · License & Export Analysis
|
||||
|
||||
**Status:** IN REVIEW (legal sign-off pending)
|
||||
**Date:** 2025-12-07
|
||||
**Date:** 2026-01-20
|
||||
**Owners:** Security Guild, Legal
|
||||
**Unblocks:** RU-CRYPTO-VAL-05, RU-CRYPTO-VAL-06
|
||||
|
||||
@@ -22,7 +22,7 @@ This document captures the licensing, export controls, and distribution guidance
|
||||
| Upstream | https://github.com/AlexMAS/GostCryptography |
|
||||
| License | MIT |
|
||||
| StellaOps Usage | Source-vendored within CryptoPro plugin folder |
|
||||
| Compatibility | MIT is compatible with AGPL-3.0-or-later |
|
||||
| Compatibility | MIT is compatible with BUSL-1.1 |
|
||||
|
||||
### 1.2 Attribution Requirements
|
||||
|
||||
@@ -68,7 +68,7 @@ CryptoPro CSP is **not redistributable** by StellaOps. The distribution model is
|
||||
├─────────────────────────────────────────────────────────────────┤
|
||||
│ │
|
||||
│ StellaOps ships: │
|
||||
│ ├── Plugin source code (AGPL-3.0-or-later) │
|
||||
│ ├── Plugin source code (BUSL-1.1) │
|
||||
│ ├── Interface bindings to CryptoPro CSP │
|
||||
│ └── Documentation for customer-provided CSP installation │
|
||||
│ │
|
||||
@@ -270,7 +270,7 @@ Running CryptoPro CSP DLLs under Wine for cross-platform testing:
|
||||
|
||||
### For Legal Sign-off
|
||||
|
||||
- [ ] Confirm MIT + AGPL-3.0 compatibility statement
|
||||
- [ ] Confirm MIT + BUSL-1.1 compatibility statement
|
||||
- [ ] Confirm customer-provided model for CSP is acceptable
|
||||
- [ ] Review export control applicability for GOST distribution
|
||||
|
||||
@@ -284,5 +284,5 @@ Running CryptoPro CSP DLLs under Wine for cross-platform testing:
|
||||
|
||||
---
|
||||
|
||||
*Document Version: 1.0.0*
|
||||
*Last Updated: 2025-12-07*
|
||||
*Document Version: 1.0.1*
|
||||
*Last Updated: 2026-01-20*
|
||||
|
||||
Reference in New Issue
Block a user