-
Notifications
You must be signed in to change notification settings - Fork 692
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Make by default validation disabled on Linux, but enabled by default on Windows #3979
Conversation
@@ -452,6 +452,10 @@ public override bool CanVerifySignedPackages(SignedPackageVerifierSettings verif | |||
{ | |||
return false; | |||
} | |||
else if (RuntimeEnvironmentHelper.IsLinux || RuntimeEnvironmentHelper.IsMacOSX) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have a question, are we going to disable verification on Linux only, or on both Linux and MacOS?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@JonDouglas is trying to reach out Apple. If no answer then better than sorry
we do for both.
src/NuGet.Core/NuGet.CommandLine.XPlat/NuGet.CommandLine.XPlat.csproj
Outdated
Show resolved
Hide resolved
test/NuGet.Core.Tests/NuGet.Packaging.Test/PackageArchiveReaderTests.cs
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM.
Good job!
This is a customer impacting feature. The issue should be moved to Home, so that the release notes tool will include it, and customers have an issue they can read for more details. |
Bug
Fixes: NuGet/Home#10713 https://github.com/NuGet/Client.Engineering/issues/880
I'll add more details later if we go ahead with this change.
Regression? Last working version: N/A
Description
Anticipating Mozilla going to drop Symantec certificate CA from their trusted database we need to release pre-empt mitigation.
More details please check NuGet/Announcements#56.
PR Checklist
PR has a meaningful title
PR has a linked issue.
Described changes
Tests
Documentation