search

spdx / tools

SPDX Tools
Apache License 2.0
123 stars 68 forks source link

Missing required license text for GPL-2.0-with-OpenSSL-exception in cryptsetup #281

Open farislam opened 2 years ago

farislam commented 2 years ago

Hello All, We are facing issue with GPL-2.0-with-OpenSSL-exception in cryptsetup. We need a valid license for it.

goneall commented 2 years ago

@farislam Can you be a bit more specific on the issue? If there needs to be a new SPDX listed license or a new SPDX listed license exception, you can submit a request. See the new license request documentation for information.

You can also create a LicenseRef within the SPDX document with the complete text of the license. See the Other Licensing Information chapter in the spec for details.

farislam commented 2 years ago

We are using this tool spdx-tools-2.2.5-jar-with-dependencies.jar to verify our spdx Document. Then we get this error: invalid: Missing required license text for GPL-2.0-with-OpenSSL-exception in cryptsetup. GPL-2.0-with-OpenSSL-exception license is not present in SPDX license list. So what do you suggest here? Should we raise a request or create a LicenseRef within the SPDX document with the complete text of the license?

goneall commented 2 years ago

Should we raise a request or create a LicenseRef within the SPDX document with the complete text of the license?

Since it takes some time to get a license on the license list (minimum 2 months), I suggest creating a LicenseRef and adding the text to the LicenseRef.

BTW - There is a newer version of the SPDX tools available you might want to try - https://github.com/spdx/tools-java