diff --git a/debian/apertis/copyright b/debian/apertis/copyright
new file mode 100644
index 0000000000000000000000000000000000000000..ed35b05bbc3871cf8b67504135d5683e1db60895
--- /dev/null
+++ b/debian/apertis/copyright
@@ -0,0 +1,522 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+
+Files: *
+Copyright: no-info-found
+License: LGPL-2.1+ AND GPL-3+
+
+Files: .clcopying
+ AUTHORS
+Copyright: 2000-2012, Free Software Foundation, Inc.
+License: FSFAP
+
+Files: INSTALL
+Copyright: 1994-1996, 1999-2002, 2004-2013, Free Software Foundation
+License: FSFAP
+
+Files: NEWS
+Copyright: no-info-found
+License: GFDL-1.3-or-later
+
+Files: THANKS
+Copyright: no-info-found
+License: GFDL-1.3-or-later
+
+Files: aclocal.m4
+Copyright: 1995-2014, Free Software Foundation, Inc.
+License: FSFULLR
+
+Files: configure
+Copyright: 1992-1996, 1998-2012, Free Software Foundation, Inc.
+License: FSFUL
+
+Files: debian/*
+Copyright: no-info-found
+License: LGPL-2.1
+
+Files: debian/crywrap.8
+Copyright: 2003, Gergely Nagy <algernon@@bonehunter.rulez.org>
+License: LGPL-2.1
+
+Files: debian/patches/insecuresha1-5.patch
+Copyright: no-info-found
+License: LGPL-2.1
+
+Files: lib/*
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/abstract_int.h
+ lib/algorithms.h
+ lib/crypto-api.c
+ lib/crypto-backend.c
+ lib/crypto-backend.h
+ lib/crypto.h
+ lib/debug.c
+ lib/debug.h
+ lib/gnutls_alert.c
+ lib/gnutls_anon_cred.c
+ lib/gnutls_auth.c
+ lib/gnutls_auth.h
+ lib/gnutls_buffers.c
+ lib/gnutls_buffers.h
+ lib/gnutls_cert.c
+ lib/gnutls_cipher.h
+ lib/gnutls_cipher_int.h
+ lib/gnutls_compress.c
+ lib/gnutls_compress.h
+ lib/gnutls_constate.c
+ lib/gnutls_constate.h
+ lib/gnutls_datum.c
+ lib/gnutls_datum.h
+ lib/gnutls_db.c
+ lib/gnutls_db.h
+ lib/gnutls_dh.c
+ lib/gnutls_dh.h
+ lib/gnutls_dtls.h
+ lib/gnutls_ecc.c
+ lib/gnutls_ecc.h
+ lib/gnutls_errors.c
+ lib/gnutls_errors.h
+ lib/gnutls_extensions.c
+ lib/gnutls_extensions.h
+ lib/gnutls_global.h
+ lib/gnutls_handshake.c
+ lib/gnutls_handshake.h
+ lib/gnutls_hash_int.c
+ lib/gnutls_hash_int.h
+ lib/gnutls_helper.c
+ lib/gnutls_helper.h
+ lib/gnutls_kx.c
+ lib/gnutls_kx.h
+ lib/gnutls_mbuffers.c
+ lib/gnutls_mbuffers.h
+ lib/gnutls_mem.c
+ lib/gnutls_mem.h
+ lib/gnutls_mpi.c
+ lib/gnutls_mpi.h
+ lib/gnutls_num.c
+ lib/gnutls_num.h
+ lib/gnutls_pcert.c
+ lib/gnutls_pk.c
+ lib/gnutls_pk.h
+ lib/gnutls_privkey_raw.c
+ lib/gnutls_psk.c
+ lib/gnutls_pubkey.c
+ lib/gnutls_record.h
+ lib/gnutls_session.c
+ lib/gnutls_session_pack.c
+ lib/gnutls_session_pack.h
+ lib/gnutls_sig.c
+ lib/gnutls_sig.h
+ lib/gnutls_srp.c
+ lib/gnutls_srp.h
+ lib/gnutls_state.h
+ lib/gnutls_str.c
+ lib/gnutls_str.h
+ lib/gnutls_str_array.h
+ lib/gnutls_supplemental.c
+ lib/gnutls_supplemental.h
+ lib/gnutls_ui.c
+ lib/gnutls_v2_compat.c
+ lib/gnutls_v2_compat.h
+ lib/gnutls_x509.c
+ lib/gnutls_x509.h
+ lib/gnutlsxx.cpp
+ lib/libgnutls.map
+ lib/locks.c
+ lib/locks.h
+ lib/pin.c
+ lib/pkcs11_int.h
+ lib/pkcs11_privkey.c
+ lib/pkcs11_secret.c
+ lib/pkcs11_write.c
+ lib/random.c
+ lib/random.h
+ lib/system.c
+ lib/system.h
+ lib/system_override.c
+ lib/verify-tofu.c
+ lib/x509_b64.c
+ lib/x509_b64.h
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/accelerated/accelerated.c
+ lib/accelerated/cryptodev-gcm.c
+ lib/accelerated/cryptodev.c
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/aes-cbc-x86-aesni.c
+ lib/accelerated/x86/aes-cbc-x86-ssse3.c
+ lib/accelerated/x86/aes-gcm-padlock.c
+ lib/accelerated/x86/aes-gcm-x86-aesni.c
+ lib/accelerated/x86/aes-gcm-x86-pclmul.c
+ lib/accelerated/x86/aes-gcm-x86-ssse3.c
+ lib/accelerated/x86/aes-padlock.c
+ lib/accelerated/x86/hmac-padlock.c
+ lib/accelerated/x86/hmac-x86-ssse3.c
+ lib/accelerated/x86/sha-x86-ssse3.c
+ lib/accelerated/x86/x86-common.c
+ lib/accelerated/x86/x86-common.h
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/aes-ccm-x86-aesni.c
+Copyright: 2014, 2015, Red Hat, Inc.
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/coff/*
+Copyright: 2011-2013, Andy Polyakov <appro@openssl.org>
+License: BSD-2-clause or GPL
+
+Files: lib/accelerated/x86/coff/aes-ssse3-x86.s
+ lib/accelerated/x86/coff/aes-ssse3-x86_64.s
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/coff/cpuid-x86.s
+ lib/accelerated/x86/coff/cpuid-x86_64.s
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/elf/*
+Copyright: 2011-2013, Andy Polyakov <appro@openssl.org>
+License: BSD-2-clause or GPL
+
+Files: lib/accelerated/x86/elf/aes-ssse3-x86.s
+ lib/accelerated/x86/elf/aes-ssse3-x86_64.s
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/elf/cpuid-x86.s
+ lib/accelerated/x86/elf/cpuid-x86_64.s
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/license.txt
+Copyright: 2006-2012, CRYPTOGAMS<appro@openssl.org>
+License: BSD-2-clause or GPL
+
+Files: lib/accelerated/x86/macosx/*
+Copyright: 2011-2013, Andy Polyakov <appro@openssl.org>
+License: BSD-2-clause or GPL
+
+Files: lib/accelerated/x86/macosx/aes-ssse3-x86.s
+ lib/accelerated/x86/macosx/aes-ssse3-x86_64.s
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/macosx/cpuid-x86.s
+ lib/accelerated/x86/macosx/cpuid-x86_64.s
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/accelerated/x86/sha-padlock.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/algorithms/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/atfork.c
+ lib/pkcs11x.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/atfork.h
+ lib/crypto-selftests-pk.c
+ lib/crypto-selftests.c
+ lib/fips.c
+ lib/fips.h
+ lib/pkcs11x.h
+ lib/safe-memfuncs.c
+Copyright: 2013, 2014, Red Hat
+License: LGPL-2.1+
+
+Files: lib/auth/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/auth/rsa_common.h
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/auth/rsa_psk.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/auto-verify.c
+ lib/system-keys-dummy.c
+ lib/system-keys-win.c
+ lib/system-keys.h
+Copyright: 2014, 2015, Red Hat, Inc.
+License: LGPL-2.1+
+
+Files: lib/ext/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/ext/alpn.c
+ lib/ext/alpn.h
+ lib/ext/dumbfw.c
+ lib/ext/dumbfw.h
+Copyright: 2013, 2014, Nikos Mavrogiannopoulos
+License: LGPL-2.1+
+
+Files: lib/ext/etm.c
+ lib/ext/etm.h
+ lib/ext/ext_master_secret.c
+ lib/ext/ext_master_secret.h
+Copyright: 2014, 2015, Red Hat, Inc.
+License: LGPL-2.1+
+
+Files: lib/ext/heartbeat.c
+ lib/ext/heartbeat.h
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/ext/srtp.c
+ lib/ext/srtp.h
+Copyright: 2012, 2014, Free Software Foundation
+License: LGPL-2.1+
+
+Files: lib/extras/randomart.c
+Copyright: no-info-found
+License: BSD-2-clause
+
+Files: lib/gnutls.pc.in
+Copyright: 2000-2012, Free Software Foundation, Inc.
+License: FSFAP
+
+Files: lib/gnutls_cipher.c
+ lib/gnutls_cipher_int.c
+ lib/gnutls_dtls.c
+ lib/gnutls_privkey.c
+ lib/gnutls_record.c
+ lib/gnutls_state.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/gnutls_global.c
+ lib/gnutls_int.h
+ lib/gnutls_priority.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/gnutls_range.c
+Copyright: 2012, INRIA Paris-Rocquencourt
+License: LGPL-2.1+
+
+Files: lib/includes/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/includes/gnutls/gnutls.h.in
+Copyright: 2000-2012, Free Software Foundation, Inc.
+License: GPL-2.1+ or LGPL-2.1+
+
+Files: lib/includes/gnutls/pkcs7.h
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/includes/gnutls/system-keys.h
+ lib/includes/gnutls/urls.h
+Copyright: 2014, 2015, Red Hat, Inc.
+License: LGPL-2.1+
+
+Files: lib/inet_ntop.c
+Copyright: 2005, 2006, 2008-2015, Free Software Foundation, Inc.
+License: GPL-2+ or ISC
+
+Files: lib/inet_pton.c
+Copyright: 1996, 1999, Internet Software Consortium.
+License: ISC
+
+Files: lib/minitasn1/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/nettle/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/nettle/cipher.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/nettle/gnettle.h
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/nettle/int/*
+Copyright: 2013, 2014, Red Hat
+License: LGPL-2.1+
+
+Files: lib/nettle/int/drbg-aes-self-test.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/nettle/int/rsa-keygen-fips186.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/nettle/pk.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/nettle/rnd-common.c
+ lib/nettle/rnd-common.h
+ lib/nettle/rnd.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/nettle/rnd-fips.c
+Copyright: 2013, 2014, Red Hat
+License: LGPL-2.1+
+
+Files: lib/opencdk/armor.c
+ lib/opencdk/context.h
+ lib/opencdk/filters.h
+ lib/opencdk/kbnode.c
+ lib/opencdk/keydb.c
+ lib/opencdk/keydb.h
+ lib/opencdk/literal.c
+ lib/opencdk/main.h
+ lib/opencdk/misc.c
+ lib/opencdk/new-packet.c
+ lib/opencdk/opencdk.h
+ lib/opencdk/packet.h
+ lib/opencdk/pubkey.c
+ lib/opencdk/read-packet.c
+ lib/opencdk/seskey.c
+ lib/opencdk/sig-check.c
+ lib/opencdk/stream.c
+ lib/opencdk/stream.h
+ lib/opencdk/types.h
+ lib/opencdk/write-packet.c
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/openpgp/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/pkcs11.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/pkcs11_int.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/tpm.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/urls.c
+ lib/urls.h
+Copyright: 2013, 2014, Nikos Mavrogiannopoulos
+License: LGPL-2.1+
+
+Files: lib/vasprintf.c
+Copyright: 2008-2014, Intel Corporation.
+License: LGPL-2.1
+
+Files: lib/x509/*
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: lib/x509/crq.c
+ lib/x509/pkcs12.c
+ lib/x509/verify-high2.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/x509/email-verify.c
+ lib/x509/hostname-verify.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/x509/gnutls-idna.h
+Copyright: 2013, 2014, Red Hat
+License: LGPL-2.1+
+
+Files: lib/x509/key_decode.c
+ lib/x509/key_encode.c
+ lib/x509/pkcs12_bag.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/x509/pkcs7-attrs.c
+ lib/x509/pkcs7-output.c
+Copyright: 2014, 2015, Red Hat, Inc.
+License: LGPL-2.1+
+
+Files: lib/x509/pkcs7.c
+ lib/x509/verify-high.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/x509/privkey_pkcs8.c
+ lib/x509/verify.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: lib/x509/x509_dn.c
+Copyright: 2013, 2014, Nikos Mavrogiannopoulos
+License: LGPL-2.1+
+
+Files: lib/x509/x509_ext.c
+Copyright: 2012, 2014, Free Software Foundation
+License: LGPL-2.1+
+
+Files: libdane/*
+Copyright: 2012, KU Leuven
+License: LGPL-2.1+
+
+Files: libdane/dane.c
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: libdane/errors.c
+Copyright: 2012, 2014, Free Software Foundation
+License: LGPL-2.1+
+
+Files: libdane/gnutls-dane.pc.in
+Copyright: 2000-2012, Free Software Foundation, Inc.
+License: FSFAP
+
+Files: libdane/libdane.map
+Copyright: no-info-found
+License: LGPL-2.1+
+
+Files: m4/*
+Copyright: 1995-2014, Free Software Foundation, Inc.
+License: FSFULLR
+
+Files: m4/gtk-doc.m4
+Copyright: no-info-found
+License: FSFULLR
+
+Files: m4/guile.m4
+Copyright: 1998, 2001, 2006, 2010, 2012, Free Software
+License: LGPL-2.1+
+
+Files: m4/hooks.m4
+Copyright: 1998-2015, Free Software Foundation, Inc.
+License: LGPL-2.1+
+
+Files: m4/libtool.m4
+Copyright: 1996-2001, 2003-2011, Free Software
+License: GPL-2+
+
+Files: m4/ltoptions.m4
+ m4/nls.m4
+Copyright: 1995-2010, Free Software Foundation
+License: FSFULLR
+
+Files: m4/pkg.m4
+Copyright: 2004, Scott James Remnant <scott@netsplit.com>.
+License: GPL-2+
diff --git a/debian/apertis/copyright.whitelist b/debian/apertis/copyright.whitelist
new file mode 100644
index 0000000000000000000000000000000000000000..65919454d2a5cf6580d34999238cb8125d5f0344
--- /dev/null
+++ b/debian/apertis/copyright.whitelist
@@ -0,0 +1,28 @@
+# ignore everything which is not part of the library code shipped
+# in lib/ and libdane/
+build-aux/
+doc/
+extra/
+gl/
+guile/
+src/
+tests/
+# ignore build scripts that do not affect the licensing of the library artifacts
+lib/Makefile*
+lib/**/Makefile*
+libdane/Makefile*
+libdane/**/Makefile*
+# ignore the exta library bits
+lib/extra
+# ignore patches affecting tests/
+debian/patches/insecuresha1-7.patch
+# ignore the texts of the licenses
+COPYING
+COPYING.LESSER
+# GPL-3 build scripts that not not affect the licensing of the artifacts
+GNUmakefile
+Makefile.am
+Makefile.in
+cfg.mk
+configure.ac
+maint.mk
diff --git a/debian/apertis/copyright.yml b/debian/apertis/copyright.yml
new file mode 100644
index 0000000000000000000000000000000000000000..6b054d255e0a627abc91c05b04ea72a992f57505
--- /dev/null
+++ b/debian/apertis/copyright.yml
@@ -0,0 +1,38 @@
+"*":
+  license: LGPL-2.1+ AND GPL-3+
+.clcopying:
+  license: FSFAP
+aclocal.m4:
+  license: FSFULLR
+build-aux/config.rpath:
+  license: FSFULLR
+m4/*:
+  license: FSFULLR
+gl/m4/*:
+  license: FSFULLR
+src/gl/m4/*:
+  license: FSFULLR
+THANKS:
+  license: GFDL-1.3-or-later
+NEWS:
+  license: GFDL-1.3-or-later
+doc/*:
+  license: GFDL-1.3-or-later
+debian/*:
+  license: LGPL-2.1
+guile/tests/openpgp-keyring.gpg:
+  license: GPL-3+
+src/libopts/*:
+  license: GPL-3+
+tests/*:
+  license: GPL-3+
+# marked LGPLv3 by mistake upstream: https://gitlab.com/gnutls/gnutls/commit/24a7ccb0f0adb935053a
+libdane/includes/gnutls/dane.h:
+  override-license: LGPL-2.1+
+libdane/errors.c:
+  override-license: LGPL-2.1+
+# assume LGPL-2.1+ for files with unknown license in the library folders
+libdane/*:
+  license: LGPL-2.1+
+lib/*:
+  license: LGPL-2.1+