Package Verification Code (section 4.7)


Marc-Etienne Vargenau
 

Hello,

The text of Package Verification Code (section 4.7) has been
changed from SPDX 1.0 to SPDX 1.1 draft.

1) Does that mean that the algorithm changed or is it just
described better?

2) After sorting, the CR/LF must be removed before applying SHA1?

3) The text in SPDX 1.1 draft refers to "normalized_filename"
but this is no longer defined.

Best regards,

Marc-Etienne

--
Marc-Etienne Vargenau
Alcatel-Lucent France, Route de Villejust, 91620 NOZAY, FRANCE
+33 (0)1 30 77 28 33, Marc-Etienne.Vargenau@...

Join spdx@lists.spdx.org to automatically receive all group messages.