I expected the comment about the whitelist to say where you could find the whitelist. This mirrors the information given in the error message if you specify an invalid license identifier.
# This is a string description of the license for this package. Currently
# crates.io will validate the license provided against a whitelist of known
-# licenses. Multiple licenses can be separated with a `/`
+# license identifiers from http://spdx.org/licenses/. Multiple licenses can
+# be separated with a `/`
license = "..."
```