question

Amazon Engineer, Amazon Legal,

I'm software engineer and Fire HD 8 (8th Generation) customer of
Amazon Japan.

I wasted my time more than 6 months since Amazon Japan Customer
Service seems to me that they don't understand OSS License at all, and
I assume they didn't consult with their legal department even though I
asked to do so.

I consulted with Amazon US Customer Service, and they suggested me to
post to this forum.

1. Summary
----------

Fire OS contains "com.amazonaws.org.eclipse.paho" Java Library which
is Amazon's derivative work of Open Source Software MQTT Java Library
eclipse/paho.mqtt.java "org.eclipse.paho" [1].

However Amazon Japan Custer Service is refusing to provide the source
code of the derivative work without explaining any reasonable reason.

[1] https://github.com/eclipse/paho.mqtt.java.

The license of eclipse/paho.mqtt.java [1] Amazon derived is "Eclipse
Public License - v 1.0", so refusing to provide the source code MUST
NOT be a choice.

Please provide the source code accordingly.

2. Background
-------------

2.1 Root Cause Investigation Result
-----------------------------------

Having interacted with Amazon Japan Customer Service regarding Music
App Alexacast Connection Issue since I reported on May 3rd 2020, I
figured out the root cause by investigating stack trace of Fire OS log
files which Amazon Japan Customer Service gave me the instruction.

Music App Alexacast Connection Issue is that Music App cannot
establish connection to Echo device, and the symptom is that pushing
cast button keeps showing revolving progress indicator, then timeout.
But sometimes connection can be established, maybe once a couple of
days.
This is exactly same symptom that the following SSL session resumption
fix [2] dealt with.

The root cause is that Amazon's derivative work
"com.amazonaws.org.eclipse.paho" doesn't contain the SSL session
resumption fix [2] committed on on 5 Sep 2016 into the original
"org.eclipse.paho" GitHub repository.

[2] Patch contributed from Issue #28 (#166)
Implementing Patches contributed by Cristiano to fix Java SSL session resumption
https://github.com/eclipse/paho.mqtt.java/commit/e71753673c0f3dadbb298392b338e7452c91a35a

Because Amazon's derivative work com.amazonaws.org.eclipse.paho"
forked from the source code committed into the original
"org.eclipse.paho" GitHub repository on 13 Nov 2015 [3].

[3] https://github.com/eclipse/paho.mqtt.java/commit/2bd10f192a074804a27c558dd827a0dd07a1f258

The following Fire OS stack trace which shows the SSL session
resumption problem matched exactly to the source code
TCPNetworkModule.java:79 [4] and SSLNetworkModule.java:86 [5]
of the commit on 13 Nov 2015 [3]

main18:06-16 23:45:50.272 1801 5527 W AWSIotMqttManager: サーバーに接続できません (32103) - java.net.ConnectException: Connection refused
main18:06-16 23:45:50.272 1801 5527 W AWSIotMqttManager: at com.amazonaws.org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:79)
main18:06-16 23:45:50.272 1801 5527 W AWSIotMqttManager: at com.amazonaws.org.eclipse.paho.client.mqttv3.internal.SSLNetworkModule.start(SSLNetworkModule.java:86)


[4] TCPNetworkModule.java:79 throw new MqttException(MqttException.REASON_CODE_SERVER_CONNECT_ERROR, ex); //ex is java.net.ConnectException
https://github.com/eclipse/paho.mqtt.java/blob/2bd10f192a074804a27c558dd827a0dd07a1f258/org.eclipse.paho.client.mqttv3/src/main/java/org/eclipse/paho/client/mqttv3/internal/TCPNetworkModule.java#L79

[5] SSLNetworkModule.java:86 super.start(); // super is TCPNetworkModule
https://github.com/eclipse/paho.mqtt.java/blob/2bd10f192a074804a27c558dd827a0dd07a1f258/org.eclipse.paho.client.mqttv3/src/main/java/org/eclipse/paho/client/mqttv3/internal/SSLNetworkModule.java#L86

According to Amazon Japan Customer Service, they decided not to fix
this problem, even though there is no workaround.
That's the reason I'm requesting the source code.


2.2 Source Code Notice Page [6] Investigation Result
----------------------------------------------------

Fire OS of Fire HD 8 (8th Generation) Japanese version is neither
7.3.1.7 nor 7.3.1.5., but 6.3.1.5 as of today.

Even though "Tab-Gen07-HD8-6.3.1.5.DOCX" [8] mentions about "Paho
Eclipse Public License - v 1.0", the source code archive file
"Fire_HD8_8th_Gen-.3.1.5-20200221.tar.bz2" [7] doesn't provide the
source code of Amazon's derivative work.

[6] http://www.amazon.com/firetabletnotices
[7] https://fireos-tablet-src.s3.amazonaws.com/BebW6HJLkfGJId9KjOcrn5QMq1/Fire_HD8_8th_Gen-6.3.1.5-20200221.tar.bz2
[8] https://customerdocumentation.s3-us-west-2.amazonaws.com/Source+Code+Notices/Fire+Tablets/Tab-Gen07-HD8-6.3.1.5.DOCX

So please include the source code of "com.amazonaws.org.eclipse.paho"
into "Fire_HD8_8th_Gen-6.3.1.5-20200221.tar.bz2" [7].

Best regards,
Naohiro