Remove TrueCrypt license to comply with DSFG standard

So as Veracrypt is basically licensed with the TrueCrypt license, I think
it is better for Debian to not distribute such software, even in non-free.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814352
Also see #1682

The TrueCrypt compatibility is already dropped so Debian should be able to package this already.

cc:

• fjords@linuxmail.org
• n@sail.ng
• mike.gabriel@das-netzwerkteam.de
• invernomuto@paranoici.org
• 814352@bugs.debian.org
• eriberto@debian.org

[frx-wintermute]

Hello,
could you please clarify what you mean?

The TrueCrypt compatibility may have been dropped, but: is there (still) any code which was forked and/or derived from TrueCrypt, code that is (still) licensed under the terms of the TrueCrypt license? If this is the case, then the TrueCrypt still applies and cannot simply be removed.

@idrassi Could you please consider removing "TrueCrypt" mention from https://github.com/veracrypt/VeraCrypt/blob/master/License.txt because lazy Debian maintainers cannot package because of it? Many Debian users actually requested for packaging for APT, but those are being rejected due to TrueCrypt's shady license model.

Or maybe move "TrueCrypt" to Contributors.txt or something.

You dropped TrueCrypt support in latest versions, why not update the License to "Apache License" only?

Ongoing RFP is: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1029456
Anyone can add reply by sending email to: 1029456@bugs.debian.org

---

• VeraCrypt removed support for TrueCrypt volumes starting with version 1.26, which means users can no longer mount or convert TrueCrypt volumes in newer versions of VeraCrypt.

• Blair Noctis n@sail.ng said this in 2023:

"As discussed in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814352, it has
a shady licensing model making it DFSG incompatible. IDK why wnpp-check wouldn't
show that one, so I'll leave this message here."

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814352 was made in 2016;

"unfortunately I have to reject your package.
According to [1] "(...)TrueCrypt seems to be reserving the right to sue
any licensee for copyright infringement, no matter whether they comply
with the conditions of the license or not. Based on this, our counsel
advised that above and beyond being non-free, software under this
license is not safe to use. (...)"

• https://wiki.debian.org/Software%20that%20can't%20be%20packaged
  VeraCrypt 1.16 Cross-platform on-the-fly disk encryption DFSG-incompatible #814352 veracrypt

---

Debian's attitude towards TrueCrypt surely doesn't apply to Veracrypt, right?