Closed daverodgman closed 10 months ago
Discussed with @ronald-cron-arm - agreed that as we are read-only at first, it is OK to release as Apache-2 only and add GPL during Q4. So we don't have to delay release necessarily.
Agreed that if we're not sure at the point of release, we will release as Apache-2 only (rather than delay release), and add GPL later if/when that is agreed.
@shebuk hope this approach is OK with you?
We will publish as Apache-2 only and GPL later if/when that is agreed alongside the change in Mbed TLS.
We must use the same license as Mbed TLS, so that when Mbed TLS pulls in PSA-Crypto source code, it can redistribute it under the licensing scheme used by Mbed TLS.
If Mbed TLS reverts to Apache 2.0 or GPL 2, this means that PSA-Crypto must do the same. We will have a definite decision on this in mid-October time, so it makes sense to delay making PSA-Crypto public until we know which option we will go for.