Display the plain english translation of the RSAREF license and require

acceptance before building the package to avoid legal ramifications for
our users. The legalese version is available in files/LICENSE to clear
up any remaining confusion about the terms.

No prompting is done when installing the package, although it should be.

3 files changed, 217 insertions, 1 deletions

diff --git a/security/rsaref/Makefile b/security/rsaref/Makefile
index b6658c6acea..46b59c28f6f 100644
--- a/security/rsaref/Makefile
+++ b/security/rsaref/Makefile
@@ -22,7 +22,13 @@ EXTRACT_SUFX=	.tar.Z
 MAINTAINER=	kris@FreeBSD.ORG
 
 WRKSRC=		${WRKDIR}/source
-RESTRICTED=	"Crypto"
+RESTRICTED=	"Contains cryptography"
+
+pre-extract:
+.if !defined(BATCH) && !defined(PACKAGE_BUILDING)
+	/usr/bin/more -e files/LICENSE.english
+	/usr/bin/dialog --yesno "Do you accept the terms of the RSAREF license agreement and wish to proceed with the build?" 8 40 || ${FALSE}
+.endif
 
 pre-configure:
 	${CP} ${FILESDIR}/Makefile ${WRKSRC}
diff --git a/security/rsaref/files/LICENSE b/security/rsaref/files/LICENSE
new file mode 100644
index 00000000000..1ea97704606
--- /dev/null
+++ b/security/rsaref/files/LICENSE
@@ -0,0 +1,137 @@
+RSA LABORATORIES RSAREF 2.0 PROGRAM LICENSE AGREEMENT
+
+RSA LABORATORIES, A DIVISION OF RSA DATA SECURITY, INC. ("RSA")
+GRANTS YOU A LICENSE AS FOLLOWS TO THE "RSAREF" PROGRAM:
+
+1.   LICENSE. RSA grants you a non-exclusive, non-transferable,
+     perpetual (subject to the conditions of Section 8) license for
+     the "RSAREF" program (the "Program") and its associated
+     documentation, subject to all of the following terms and
+     conditions:
+
+     a.   to use the Program on any computer;
+
+     b.   to make copies of the Program for back-up purposes;
+
+     c.   to modify the Program in any manner for porting or
+          performance improvement purposes (subject to Section 2) or
+          to incorporate the Program into other computer programs for
+          your own personal or internal use, provided that you provide
+          RSA with a copy of any such modification or Application
+          Program by electronic mail, and grant RSA a perpetual,
+          royalty-free license to use and distribute such
+          modifications and Application Programs on the terms set
+          forth in this Agreement.
+
+     d.   to copy and distribute the Program and Application Programs
+          in accordance with the limitations set forth in Section 2.
+
+"Application Programs" are programs which incorporate all or any
+portion of the Program in any form. The restrictions imposed on
+Application Programs in this Agreement shall not apply to any
+software which, through the mere aggregation on distribution media,
+is co-located or stored with the Program.
+
+2.   LIMITATIONS ON LICENSE.
+
+     a.   RSA owns the Program and its associated documentation and
+          all copyrights therein. You may only use, copy, modify and
+          distribute the Program as expressly provided for in this
+          Agreement. You must reproduce and include this Agreement,
+          RSA's copyright notices and disclaimer of warranty on any
+          copy and its associated documentation. The Program and any
+          Application programs must be distributed with their source
+          code.
+
+     b.   The Program may not be used directly for revenue-generating
+          purposes. You may not:
+
+          (i)  use the Program to provide services to others for which
+               you are compensated in any manner;
+
+          (ii) license or otherwise distribute any Application Program
+               in any manner that generates income to you, including
+               without limitation any income on account of license
+               fees, royalties, maintenance fees and upgrade fees; and
+
+          (iii) license or otherwise distribute any Application
+               Program without the express written acknowledgment of
+               the end user that the Program will not be used in
+               connection with any revenue-generating activity of the
+               end user.
+
+          Nothing in this paragraph prohibits you from using the
+          Program or any Application Program solely for internal
+          purposes on the premises of a business which is engaged in
+          revenue-generating activities.
+
+     c.   The Program, if modified, must carry prominent notices
+          stating that changes have been made, and the dates of any
+          such changes. 
+
+     d.   Prior permission from RSA in writing is required for any
+          modifications that access the Program through ways other
+          than the published Program interface or for modifications to
+          the Program interface. (See the "What is it? RSAREF Supports
+          the Following Algorithms" and "What You Can (and Cannot) Do
+          With RSAREF," paragraph 4, all incorporated herein by
+          reference, for details.) RSA will grant all reasonable
+          requests for permission to make such modifications.
+
+3.   NO RSA OBLIGATION. You are solely responsible for all of your
+     costs and expenses incurred in connection with the distribution
+     of the Program or any Application Program hereunder, and RSA
+     shall have no liability, obligation or responsibility therefor.
+     RSA shall have no obligation to provide maintenance, support,
+     upgrades or new releases to you or to any distributee of the
+     Program or any Application Program.
+
+4.   NO WARRANTY OF PERFORMANCE. THE PROGRAM AND ITS ASSOCIATED
+     DOCUMENTATION ARE LICENSED "AS IS" WITHOUT WARRANTY AS TO THEIR
+     PERFORMANCE, MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR
+     PURPOSE. THE ENTIRE RISK AS TO THE RESULTS AND PERFORMANCE OF
+     THE PROGRAM IS ASSUMED BY YOU AND YOUR DISTRIBUTEES. SHOULD THE
+     PROGRAM PROVE DEFECTIVE, YOU AND YOUR DISTRIBUTEES (AND NOT RSA)
+     ASSUME THE ENTIRE COST OF ALL NECESSARY SERVICING, REPAIR OR
+     CORRECTION.
+
+5.   LIMITATION OF LIABILITY. EXCEPT AS EXPRESSLY PROVIDED FOR IN
+     SECTION 6 HEREINUNDER, NEITHER RSA NOR ANY OTHER PERSON WHO HAS
+     BEEN INVOLVED IN THE CREATION, PRODUCTION, OR DELIVERY OF THE
+     PROGRAM SHALL BE LIABLE TO YOU OR TO ANY OTHER PERSON FOR ANY
+     DIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES, EVEN IF RSA HAS BEEN
+     ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+6.   Nothing in this agreement shall be construed as a representation
+     or warranty against infringement of any third party rights based
+     on use of the program.
+
+7.   RSAREF is a non-commercial publication of cryptographic
+     techniques. Portions of RSAREF have been published in the
+     International Security Handbook and the August 1992 issue of Dr.
+     Dobb's Journal. Privacy applications developed with RSAREF may be
+     subject to export controls. If you are located in the United
+     States and develop such applications, you are advised to consult
+     with the State Department's Office of Defense Trade Controls.
+
+8.   TERM. The license granted hereunder is effective until
+     terminated. You may terminate it at any time by destroying the
+     Program and its associated documentation. The termination of your
+     license will not result in the termination of the licenses of any
+     distributees who have received rights to the Program through you
+     so long as they are in compliance with the provisions of this
+     license.
+
+9.   GENERAL
+
+     a.   This Agreement shall be governed by the laws of the State of
+          California.
+
+     b.   Address all correspondence regarding this license to RSA's
+          electronic mail address <rsaref-administrator@rsa.com>, or
+          to
+
+               RSA Laboratories
+               ATTN: RSAREF Administrator
+               100 Marine Parkway, Suite 500
+               Redwood City, CA  94065
diff --git a/security/rsaref/files/LICENSE.english b/security/rsaref/files/LICENSE.english
new file mode 100644
index 00000000000..0765e2ab7f8
--- /dev/null
+++ b/security/rsaref/files/LICENSE.english
@@ -0,0 +1,73 @@
+WHAT YOU CAN (AND CANNOT) DO WITH RSAREF
+
+     1.   RSAREF is free for personal or corporate use under the
+          following conditions:
+
+          o    RSAREF, RSAREF applications, and services based on
+               RSAREF applications may not be sold.
+
+          o    You must give RSA the source code of any free RSAREF
+               application you plan to distribute or deploy within
+               your company. RSA will make these applications
+               available to the public, free of charge.
+
+     2.   RSAREF applications and services based on RSAREF
+          applications may be sold under the following conditions:
+
+          o    You must sign and return the RSAREF Commercial License
+               Agreement to RSA (call RSA for a copy of this
+               agreement). Remember, RSAREF is an unsupported toolkit.
+               If you are building an application to sell, you should
+               consider using fully supported libraries like RSA's
+               BSAFE or TIPEM SDK's.
+
+     3.   RSAREF applications and services based on RSAREF
+          applications may be "sharewared" under the following
+          conditions:
+
+          o    Shareware authors do not need to sign a separate
+               agreement with RSA, provided that their per-copy asking
+               price is less than $50 and total RSAREF application
+               revenue is less than $10,000 annually. Otherwise,
+               shareware authors must sign and return the RSAREF
+               Commercial License Agreement.
+
+     4.   You must use the interface described in the RSAREF
+          documentation.
+
+          o    The published interface of RSAREF consists of those
+               procedures and data types listed in the files
+               "global.h" and "rsaref.h", as described in the RSAREF
+               library reference manual (the file "rsaref.txt"). If a
+               procedure is not documented in the library reference
+               manual, then it is not considered published, even if an
+               application could access it without modification to
+               RSAREF.
+
+          o    Furthermore, the published interface is understood as
+               the reasonable interpretation of the descriptions in
+               the library reference manual. Although it may well be
+               possible to perform other operations with procedures
+               listed in "rsaref.h" than what is described in
+               "rsaref.txt", only the intended operations (e.g.,
+               Diffie-Hellman key agreement with the Diffie-Hellman
+               procedures) are considered to follow the published
+               interface.
+
+     5.   You can modify RSAREF to port it to other platforms, or to
+          improve its performance, as long as you give a copy of the
+          resulting source code to RSA. Other changes to the RSAREF
+          code require written consent from RSA.
+
+     6.   You can't send or transmit (or cause to be transmitted)
+          RSAREF outside the United States or Canada, or give it to
+          anyone who is not a U.S. or Canadian citizen or doesn't have
+          a "green card."
+
+--------------------------------------------------------------------------
+**************************************************************************
+The above is a "plain english" version of the RSAREF license agreement.
+If there is any confusion about the licensing terms, please answer 'NO' to
+the following question and consult the full text of the license agreement
+under 'files/LICENSE'
+**************************************************************************