Einar, In my previous email I wrote something potentially confusing (really a typo):

For developers (commercial or open source), the OpenSSL license only mentions redistribution of the OpenSSL code in binary form (paragraph 2). In this context "binary form" means the complete program binary, not partial binary as with statically linking to a library, so developers of GHC programs would *not* have to include the whole OpenSSL&SSLeay license in their source code.

I meant in their code, not "source code", source or binary. I hope that helps. Best regards, Peter