Wrong License in the Zip Distribution / FISH-6477

[jansupol]

https://search.maven.org/artifact/fish.payara.distributions/payara/5.2022.2/zip binary distribution contains an EPLv2 license, unlike the CDDL + GPLv2+CPE license in the sources.

[JamesHillyard]

Hi @jansupol,

Are you referring to the EPLv2 license which was added in this PR #3779 for the JakartaEE 8 components?

Thanks,
James

[jansupol]

Possibly. It is the only LICENSE.md file in the zip, with no mention of EE8 relation. Feel free to close this issue if you think the license there is correct.

[JamesHillyard]

Hi @jansupol,

Thank for you clarifying, I will raise this internally to verify the licences in our sources and binary distributions are correctly listed, and I will provide you with an update after we have verified this.

Best Regards,
James

[Pandrex247]

The actual license for Payara is under payara5/glassfish/legal.

I believe this top-level license file is actually the license file from OpenMQ.
The way OpenMQ is included in the build is essentially by unpacking mq-dist.zip into the Payara install. Previously the license file for OpenMQ was under mq/legal and it has now been moved to be in the top-level of the zip (as in it's above mq). Under the same logic, I think the NOTICE.md file is also coming from OpenMQ.

So yes we probably need to look at adjusting the bundling of OpenMQ within the build.

[JamesHillyard]

Hi @jansupol,

Thank you for raising this issue, good spot! It is being tracked under the internal ID FISH-6477 and this will be investigated and fixed by the development team shortly.

Thanks,
James

[JamesHillyard]

Hi @jansupol,

With thanks to @pzygielo who submitted a contribution to fix this, this issue has been resolved in Payara 6.2022.1.Alpha4 and will be fixed in the upcoming Payara 5.2022.4 release.

Thank you again for raising this issue.

Best Regards,
James