On Aug 19, 2015, at 11:41 AM, Gobeille, Robert <bob.gobeille@...> wrote:

We (FOSSology) have discovered some of our license short names that violate your list of allowed characters. For example, here is the output from your verification tool when I ran it against your three sample packages from the backoff this week:

bobg$ java -jar spdx-tools-2.0.2-jar-with-dependencies.jar Verify SPDX2_time_1439848453.rdf
WARN [main] (ListedLicenses.java:342) - Unable to access the SPDX listed licenses at http://www.spdx.org/licenses. Using local file copy of SPDX listed licenses
This SPDX Document is not valid due to:
Invalid license id 'LicenseRef-Gov't-work'. Must start with 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z', '0'-'9', '+', '_', '.', and '-'.
Invalid license id 'LicenseRef-JPEG/netpbm'. Must start with 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z', '0'-'9', '+', '_', '.', and '-'.
Invalid license id 'LicenseRef-See-doc(OTHER)'. Must start with 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z', '0'-'9', '+', '_', '.', and '-'.
Invalid license id 'LicenseRef-Non-profit!'. Must start with 'LicenseRef-' and made up of the characters from the set 'a'-'z', 'A'-'Z', '0'-'9', '+', '_', '.', and '-'.

But Appendix IV http://spdx.org/sites/spdx/files/SPDX-2.0.pdf says that the valid characters for idstring are:

idstring = 1*(ALPHA / DIGIT / “-" / ".” )

I realize you consider the ‘+’ to be an expression operator, as in GPL-2.0+ so that is ok to use in our license names. But what about the underscore? The verifier says that an underscore is a valid character but I don’t see that it is allowed in the SPDX 2 spec. What am I missing?

Thanks,
Bob Gobeille
bobg@...
_______________________________________________
Spdx-legal mailing list
Spdx-legal@...
https://lists.spdx.org/mailman/listinfo/spdx-legal