RockyGuard -- Third-party components
=====================================

This package bundles OpenSSL. RockyGuard itself is licensed separately;
see docs/RockyGuard_License_Agreement.txt. Nothing here changes the terms
of that agreement.

OpenSSL
-------
  Version:   3.6.1
  Licence:   Apache License 2.0
  Home page: https://www.openssl.org/
  Full text: deps/OPENSSL-LICENSE.txt (in this package)

You may redistribute OpenSSL. On Linux, OpenSSL is statically linked
into librockyguard.so and into any executable you static-link against
librockyguard.a, so OpenSSL code is present in the binaries you ship even
though no separate OpenSSL file appears beside them. The Apache-2.0
obligations below therefore apply to YOUR distribution as well as to ours.

What Apache-2.0 requires of you when you redistribute:

  - Include a copy of the licence. Shipping deps/OPENSSL-LICENSE.txt
    alongside your application, or reproducing it in your own
    third-party-notices document, satisfies this.
  - Keep the copyright, patent, trademark and attribution notices that
    appear in the OpenSSL source you received.
  - State that you changed the files, if you changed any. We did not
    modify OpenSSL; it is built from the unmodified upstream release
    named above.

OpenSSL 3.x does NOT ship a separate NOTICE file, so Apache-2.0 section
4(d) -- which applies only when the upstream work includes one -- imposes
no additional obligation here. The licence text is the whole requirement.
That is stated explicitly because a legal reviewer who looks for a NOTICE
file and does not find one should know it is absent upstream rather than
missing from this package.

This summary is provided for convenience and is not legal advice. The
authoritative terms are in deps/OPENSSL-LICENSE.txt.
