Page History

For http://www.apache.org/licenses/exports/ - see

Jira

server	ASF JIRA
columns	key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId	5aa69414-a9e9-3523-82ec-879b028fb15b
key	TAVERNA-959

Jira

server	ASF JIRA
columns	key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId	5aa69414-a9e9-3523-82ec-879b028fb15b
key	LEGAL-250

Also described in READMEs:

ECCN classification

To consider if Taverna code is classified, we follow Flowchart 1 from https://

...

www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items, with the questions:

Is the item designed to use cryptography or does it contain cryptography? (exempt if No)
Is the hardware or software specially designed for medical end use? (exempt if Yes)
Is the product described by Note 4? (exempt if Yes)
Is the encryption functionality limited to intellectual property or copyright protection functions? (exempt if Yes)

If we get through this, then we are controlled under Category 5, part 2 and must consider flow chart 2 to determine if we can self-classify using https://www.bis.doc.gov/index.php/policy-guidance/encryption/registration.

Is the item publicly available encryption source code? (If yes, self-classify as ECCN 5D002)
Beta Test Software? (If yes, self-classify as ECCN 5200d)
Encryption using key length <= 56 symmetric, <= 512 assymmetric or <= 112 elliptic curve? (If yes, self-classify as ECCN 5x992 NLR)
Is the item described in Note for 5A002? (If yes, self-classify as 5x992)
Is the item limited to authentication only? (If yes, self-classify as 5x992)
Does the item meet the criteria for Mass Market?

So for each of our repositories:

incubator-taverna-maven-parent:

Is the item designed to use cryptography or does it contain cryptography? No
- Not controlled

incubator-taverna-language:

Is the item designed to use cryptography or does it contain cryptography? Yes
- The shaded JAR of taverna-tavlang-tool include Apache HttpComponents Core and Client (ECCN classified on https://www.apache.org/licenses/exports/), which can initiate encrypted https:// connections using Java Secure Socket Extension (JSSE).
- (In fact this can fetch https://w3id.org/bundle/context.json)
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Set of function includes taverna-robundle and taverna-databundle, which primary function is to store information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-osgi:

Is the item designed to use cryptography or does it contain cryptography? Yes
- taverna-download-impl depend on the Apache HttpComponents Client, which can initiate encrypted https:// connections using Java Secure Socket Extension (JSSE).
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Set of function include taverna-download-impl, which primary function is to receive information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-engine:

Is the item designed to use cryptography or does it contain cryptography? Yes
- taverna-credential-manager-impl manages an encrypted keystore for username/passwords and client/server SSL certificates. It is designed to be used with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), and depends on the BouncyCastle bcprov encryption library. The JCE Unlimited Strength Jurisdiction Policy may need to be installed separately to use keystore passwords with 7 or more characters.
- Apache Taverna Engine depends on Apache Taverna Language, Apache Taverna OSGi and Apache Jena, which depend on Apache HttpComponents Client, which can initiate encrypted https:// connections using Java Secure Socket Extension (JSSE).
- taverna-database-configuration-impl and taverna-reference-impl depend on Apache Derby, which uses the Java Cryptography Extension (JCE) API.
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Set of functions include taverna-credential-manager-impl, which primary function is Information security
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-commandline

Is the item designed to use cryptography or does it contain cryptography? Yes
- Apache Taverna Command Line depends on and interacts with the Apache Taverna Engine credential manager.
- After building, the taverna-commandline-product archive lib folder includes BouncyCastle bcprov encryption library, Apache HttpComponents Core and Client, Apache Derby, Jetty, Apache WSS4J, Apache XML Security for Java, Open SAML Java
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Primary function is to execute workflows - however those workflows generally do Sending, receiving or storing information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-common-activities

Is the item designed to use cryptography or does it contain cryptography? Yes
- taverna-rest-activity depends on Apache HttpComponents Client, and can be configured to initiate https:// connections.
- taverna-wsdl-generic and taverna-wsdl-activity use Java Secure Socket Extension (JSSE) and depend on Apache WSS4J, Apache XML Security for Java for accessing secure SOAP Web Services.
- Apache Taverna Common Activities depends on the Apache Taverna Engine Credential Manager API for management of username/password and client/server SSL certificates.
- taverna-interaction-activity is designed for use with Jetty (ECCN 5D002.c.1)
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? N
- Primary function is Sending and receiving information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-server

Is the item designed to use cryptography or does it contain cryptography? Yes
- Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache CXF and Apache Taverna Command Line
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Set of function includes Sending, receiving and storing information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-databundle-viewer

Is the item designed to use cryptography or does it contain cryptography? Yes
- Designed for use with Ruby OpenSSL
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Primary function is Sending, receiving and storing information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-mobile

Is the item designed to use cryptography or does it contain cryptography? Yes
- Designed for use with Android SDK https support, Dropbox Android SDK and Apache HttpComponent
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Primary function is Sending, receiving and storing information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-plugin-bioinformatics

Is the item designed to use cryptography or does it contain cryptography? Yes
- Designed for use with Taverna Engine's Credential Manager
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Primary function is Sending, receiving and storing information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-plugin-component

Is the item designed to use cryptography or does it contain cryptography? Yes
- Designed for use with Taverna Engine's Credential Manager
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Set of function includes Receiving information
- As it retrieves workflows from http://www.myexperiment.org/
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-plugin-gis

Is the item designed to use cryptography or does it contain cryptography? No
- Not controlled

incubator-taverna-workbench

Is the item designed to use cryptography or does it contain cryptography? Yes
- Designed for use with Taverna Engine's Credential Manager
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Primary function is to design workflows, but set of functions includes UI for the Credential Manager
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-workbench-common-activities

Is the item designed to use cryptography or does it contain cryptography? Yes
- Designed for use with Taverna Engine's Credential Manager, HttpComponents and Taverna Common Activities WSS4j support.
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Set of function includes Receiving information (for Service Discovery)
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

incubator-taverna-workbench-product

Is the item designed to use cryptography or does it contain cryptography? Yes
- Builds distribution that includes Apache WSS4J, Apache XML Security for Java, Apache HttpComponents and BouncyCastle crypto
Is the hardware or software specially designed for medical end use? No
Is the product described by Note 4? No
- Primary function is to design and run workflows, but those workflows generally do Sending, receiving or storing information
Is the encryption functionality limited to intellectual property or copyright protection functions? No
Is the item publicly available encryption source code? Yes
- ECCN 5D002

Not (yet) classified

https://github.com/apache/incubator-taverna-maven-parent (exempt)

The taverna-plugin-* and taverna-workbench-* repositories have been classified mainly because they depend on Taverna Engine. This might be reviewed, see LEGAL-250 about transitivity.

Encryption declaration XML

Added to https://svn.apache.org/repos/asf/infrastructure/site/trunk/content/licenses/exports/index.page/eccnmatrix.xml according to http://www.apache.org/dev/crypto.html

Note that there are two sections - development is for our multiple source code repositories as listed on http://taverna.incubator.apache.org/code/ - and all releases which cover anything under https://archive.apache.org/dist/incubator/taverna/ (however this would include releases of even potentially non-classified products like taverna-maven-parent or incubator-taverna-databundle-viewer). Taverna releases are separate per code repository - so this could alternatively be split into many separate <Version> declarations - but then we might have to reorganize the dist folders to avoid updating this XML for every release.

Code Block

language	xml

  <Product>
    <Name>Apache Taverna</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-language.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache HttpComponents</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-osgi.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache HttpComponents</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-engine.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache Derby, Apache Taverna Language and Apache Taverna OSGi</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-common-activities.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Jetty, Apache WSS4J, Apache XML Security for Java, Apache HttpComponents and Apache Taverna Engine</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-commandline.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache WSS4J, Apache XML Security for Java, Apache HttpComponents, BouncyCastle crypto, Apache Taverna Engine and Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-server.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache CXF and Apache Taverna Command Line</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-workbench.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE) and Apache Taverna Engine</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-workbench-common-activities.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache Taverna Workbench and Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-workbench-product.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Builds distribution that includes Apache WSS4J, Apache XML Security for Java, Apache HttpComponents and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-plugin-component.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache HttpComponents, Apache Taverna Engine, Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-plugin-bioinformatics.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache Taverna Engine</Why>
      </ControlledSource>

...

Not classified

https://github.com/apache/incubator-taverna-maven-parent

https://github.com/apache/incubator-taverna-databundle-viewer

https://github.com/apache/incubator-taverna-mobile

The taverna-plugin-* and taverna-workbench-* repositories have been classified mainly because they depend on Taverna Engine. This might be reviewed, see LEGAL-250 about transitivity.

Encryption declaration XML

To be added to https://svn.apache.org/repos/asf/infrastructure/site/trunk/content/licenses/exports/index.page/eccnmatrix.xml according to http://www.apache.org/dev/crypto.html

Note that there are two sections - development is for our multiple source code repositories as listed on http://taverna.incubator.apache.org/code/ - and all releases which cover anything under https://archive.apache.org/dist/incubator/taverna/ (however this would include releases of even potentially non-classified products like taverna-maven-parent or incubator-taverna-databundle-viewer). Taverna releases are separate per code repository - so this could alternatively be split into many separate <Version> declarations - but then we might have to reorganize the dist folders to avoid updating this XML for every release.

Code Block

language	xml

  <Product>
    <Name>Apache Taverna</Name>
    <Version>
      <Names>development</Names>
      <ECCN>5D002</ECCN>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-languageplugin-gis.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache HttpComponents<Apache Taverna Engine, Apache Taverna Common Activities</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-osgimobile.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Android SDK https support, Dropbox Android SDK and Apache HttpComponents<HttpComponent</Why>
      </ControlledSource>
      <ControlledSource href="https://git-wip-us.apache.org/repos/asf/incubator-taverna-databundle-engineviewer.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE), BouncyCastle crypto, Apache Derby, Apache Taverna Language and Apache Taverna OSGi< Ruby OpenSSL</Why>
      </ControlledSource>

      <ControlledSource href="httpshttp://git-wip-us.apache.bouncycastle.org/reposdownload/asf/incubatorbcprov-taverna-common-activities.gitjdk15on-154.tar.gz">
        <Manufacturer>ASF<<Manufacturer>Bouncy Castle</Manufacturer>
        <Why>Designed for use with Java Secure Socket Extension (JSSE), Jetty, Apache WSS4J, Apache XML Security for Java, Apache<Why>General-purpose HttpComponentsencryption andlibrary Apachefor TavernaJava Engine<1.5</Why>
      </ControlledSource>
      <ControlledSource href="httpshttp://git-wip-us.apache.org/repos/asf/incubator-taverna-commandline.git">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache WSS4J, Apache XML Security for Java, Apache HttpComponents, BouncyCastle crypto, Apache Taverna OSGi, Apache Taverna Engine and Apache Taverna Common Activities<eclipse.org/jetty">
        <Manufacturer>The Eclipse Foundation</Manufacturer>
        <Why>SSL library for Jetty</Why>
      </ControlledSource>
      <ControlledSource href="httpshttp://git-wip-us.apache.org/repos/asf/incubator-taverna-server.gitwww.oracle.com/technetwork/java/javase/downloads/index.html">
        <Manufacturer>ASF<<Manufacturer>Oracle</Manufacturer>
        <Why>Designed<Why>general-purpose for use with Java Secure Socket Extension (JSSE), Java Cryptography Extension cryptography library (JCE), BouncyCastleincluded crypto, Apache CXF and Apache Taverna Command Line<with Java</Why>
      </ControlledSource>
      <ControlledSource href="httpshttp://git-wip-uswww.apache.org/reposdist/asf/incubator-taverna-workbench-common-activities.gitsantuario/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed<Why>General-purpose for use with Apache Taverna Workbench and Apache Taverna Common Activities<XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="httpshttp://git-wip-ussvn.apache.org/reposviewvc/asfsantuario/incubatorxml-taverna-workbench-product.git">
        <Manufacturer>ASF</Manufacturer>security-java/branches/1.5.x-fixes/">
        <Why>Designed<Manufacturer>ASF</Manufacturer>
 for use with Apache WSS4J, Apache XML Security<Why>Implements for Java, Apache HttpComponents, BouncyCastle crypto, Apache Taverna OSGi, Apache Taverna Engine and Apache Taverna Common Activities<XML Signature and Encryption specs</Why>
      </ControlledSource>
      <ControlledSource href="httpshttp://git-wip-us.apache.org/repos/asf/incubator-taverna-plugin-component.gitpeople.apache.org/dist/cxf/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with the Apache HttpComponents,XML ApacheSecurity TavernaJava EngineAPI, ApacheWSS4J Tavernaand CommonBouncyCastle Activities<crypto</Why>
      </ControlledSource>
      <ControlledSource href="httpshttp://git-wip-usarchive.apache.org/reposdist/xml/asfsecurity/incubator-taverna-plugin-bioinformatics.gitjava-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed<Why>General-purpose forXML useencryption withand Apachedigital Tavernasignature Engine<implementation</Why>
      </ControlledSource>
      <ControlledSource href="httpshttp://git-wip-usarchive.apache.org/dist/reposdb/asf/incubator-taverna-plugin-gis.gitderby/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed<Why>designed for use with Apachethe TavernaJava Engine,Cryptography ApacheExtension Taverna Common Activities<(JCE) API</Why>
      </ControlledSource>

      <ControlledSource href="httphttps://bouncycastle.org/download/bcprov-jdk15on-154.tar.gzwww.dropbox.com/developers-v1/core/sdks/android">
        <Manufacturer>Bouncy Castle<<Manufacturer>Dropbox</Manufacturer>
         <Why>General-purpose encryption library for Java 1.5<<Why>designed for use with Android SDK, adds a SecureSSLSocketFactory</Why>
      </ControlledSource>
      <ControlledSource href="httphttps://eclipseandroid.googlesource.orgcom/jetty">
        <Manufacturer>The Eclipse Foundation<<Manufacturer>Google</Manufacturer>
        <Why>includes encryption code adapted <Why>SSLfrom libraryOpenSSL, forBouncyCastle, Jetty<BoringSSL</Why>
      </ControlledSource>
      <ControlledSource href="httphttps://www.oraclegithub.com/technetwork/java/javase/downloads/index.htmlruby/openssl">
        <Manufacturer>Oracle<<Manufacturer>Ruby Programming Language</Manufacturer>
        <Why>general-purpose<Why>designed cryptography library (JCE) included for use with Java<OpenSSL</Why>
      </ControlledSource>
      <ControlledSource href="http://www.apacheopenssl.org/dist/santuario/java-library/source/">
        <Manufacturer>ASF</Manufacturer><Manufacturer>The OpenSSL Project</Manufacturer>
        <Why>Publicly available SSL encryption library</Why>
      </ControlledSource>
    </Version>
    <Why>General-purpose XML encryption and digital signature implementation</Why><Version>
      <Names>all releases</Names>
      <<ECCN>5D002</ControlledSource>ECCN>
      <ControlledSource href="httphttps://svnarchive.apache.org/viewvcdist/santuario/xml-security-java/branches/1.5.x-fixes/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Implements XML Signature and Encryption specs<incubator/taverna/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache CXF, Apache WSS4J, Apache XML Security for Java, Apache HttpComponents, Apache Derby, BouncyCastle crypto, Jetty, Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE)</Why>
      </ControlledSource>
      <ControlledSource href="http://people.apache.org/dist/cxf/bouncycastle.org/download/bcprov-jdk15on-154.tar.gz">
        <Manufacturer>ASF<<Manufacturer>Bouncy Castle</Manufacturer>
        <Why>Designed<Why>General-purpose forencryption use with the Apache XML Security Java API, WSS4J and BouncyCastle crypto<library for Java 1.5</Why>
      </ControlledSource>
      <ControlledSource href="http://archiveeclipse.apache.org/dist/xml/security/java-library/jetty">
        <Manufacturer>The <Manufacturer>ASF<Eclipse Foundation</Manufacturer>
        <Why>General-purpose XML encryption and<Why>SSL digitallibrary signaturefor implementation<Jetty</Why>
      </ControlledSource>
      <ControlledSource href="http://archivewww.apacheoracle.orgcom/technetwork/distjava/dbjavase/derbydownloads/index.html">
        <Manufacturer>ASF</Manufacturer>
        <Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource><Manufacturer>Oracle</Manufacturer>
    </Version>
    <Version>
<Why>general-purpose cryptography library (JCE) included with <Names>all releases<Java</Names>Why>
      <ECCN>5D002<</ECCN>ControlledSource>
      <ControlledSource href="httpshttp://archivewww.apache.org/dist/incubator/taverna/">
        <Manufacturer>ASF</Manufacturer>
        <Why>Designed for use with Apache CXF, Apache WSS4J, Apache XML Security for Java, Apache HttpComponents, Apache Derby, BouncyCastle crypto, Jetty, Java Secure Socket Extension (JSSE), Java Cryptography Extension (JCE)<santuario/java-library/">
        <Manufacturer>ASF</Manufacturer>
        <Why>General-purpose XML encryption and digital signature implementation</Why>
      </ControlledSource>
      <ControlledSource href="http://bouncycastlesvn.apache.org/download/bcprov-jdk15on-154.tar.gzviewvc/santuario/xml-security-java/branches/1.5.x-fixes/">
        <Manufacturer>Bouncy Castle<<Manufacturer>ASF</Manufacturer>
        <Why>General-purpose<Why>Implements encryptionXML librarySignature forand JavaEncryption 1.5<specs</Why>
      </ControlledSource>
      <ControlledSource href="http://eclipsepeople.apache.org/jettydist/cxf/">
        <Manufacturer>The Eclipse Foundation<<Manufacturer>ASF</Manufacturer>
        <Why>SSL library for Jetty<<Why>Designed for use with the Apache XML Security Java API, WSS4J and BouncyCastle crypto</Why>
      </ControlledSource>
      <ControlledSource href="http://wwwarchive.oracleapache.comorg/technetworkdist/javaxml/javasesecurity/downloads/index.htmljava-library/">
        <Manufacturer>Oracle<<Manufacturer>ASF</Manufacturer>
        <Why>general<Why>General-purpose cryptographyXML libraryencryption (JCE)and includeddigital withsignature Java<implementation</Why>
      </ControlledSource>
      <ControlledSource href="http://wwwarchive.apache.org/dist/santuariodb/java-libraryderby/">
        <Manufacturer>ASF</Manufacturer>
         <Why>General-purpose XML encryption and digital signature implementation<<Why>designed for use with the Java Cryptography Extension (JCE) API</Why>
      </ControlledSource>
      <ControlledSource href="httphttps://svnwww.apachedropbox.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/com/developers-v1/core/sdks/android">
        <Manufacturer>ASF<<Manufacturer>Dropbox</Manufacturer>
        <Why>Implements XML Signature and Encryption specs<<Why>designed for use with Android SDK, adds a SecureSSLSocketFactory</Why>
      </ControlledSource>
      <ControlledSource href="httphttps://peopleandroid.apachegooglesource.orgcom/dist/cxf/">
        <Manufacturer>ASF<<Manufacturer>Google</Manufacturer>
  
      <Why>Designed for use<Why>includes withencryption thecode Apacheadapted XML Security Java APIfrom OpenSSL, WSS4J and BouncyCastle, crypto<BoringSSL</Why>
      </ControlledSource>
      <ControlledSource href="httphttps://archivegithub.apache.orgcom/dist/xml/security/java-library/ruby/openssl">
        <Manufacturer>Ruby <Manufacturer>ASF<Programming Language</Manufacturer>
        <Why>General-purpose<Why>designed XMLfor encryptionuse and digital signature implementation<with OpenSSL</Why>
      </ControlledSource>
      <ControlledSource href="http://archivewww.apacheopenssl.org/distsource/db/derby/">
        <Manufacturer>The OpenSSL <Manufacturer>ASF<Project</Manufacturer>
        <Why>designed<Why>Publicly foravailable useSSL with the Java Cryptography Extension (JCE) API<encryption library</Why>
      </ControlledSource>
    </Version>
  </Product>

Draft registration email

...

Code Block

language	text

   TO: crypt AT bis.doc.gov, 
       enc AT nsa.gov, 
       web_site AT bis.doc.gov
   CC: {applicable project list}, 
       {legal-archive AT a.o}

   SUBJ: TSU NOTIFICATION - Encryption

SUBMISSION TYPE:      TSU

SUBMITTED BY:         	{Incubator PMC chair}Ted Dunning

SUBMITTED FOR:        Apache Software Foundation

POINT OF CONTACT:     Secretary, Apache Software Foundation

FAX:                  +1-919-573-9199
				
MANUFACTURER(S):   
    
The Apache Software Foundation
Oracle
Bouncy Castle
The Eclipse Foundation
	Oracle
Dropbox
Google
Ruby Programming Language
The OpenSSL Project

PRODUCT NAME/MODEL #: 
Apache Taverna

ECCN:                 5D002

NOTIFICATION:         http://www.apache.org/licenses/exports/

...

     http://www.apache.org/licenses/exports/

README updates

Also described in READMEs:

Space shortcuts

Page tree

Versions Compared

Old Version 12

New Version Current

Key

ECCN classification

Not (yet) classified

Encryption declaration XML

Not classified

Encryption declaration XML

Draft registration email

README updates