Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make by default validation disabled on Linux, but enabled by default on Windows #3979

Merged
merged 11 commits into from
Apr 1, 2021

Conversation

erdembayar
Copy link
Contributor

@erdembayar erdembayar commented Mar 31, 2021

Bug

Fixes: NuGet/Home#10713 https://github.com/NuGet/Client.Engineering/issues/880
I'll add more details later if we go ahead with this change.

Regression? Last working version: N/A

Description

Anticipating Mozilla going to drop Symantec certificate CA from their trusted database we need to release pre-empt mitigation.
More details please check NuGet/Announcements#56.

PR Checklist

  • PR has a meaningful title

  • PR has a linked issue.

  • Described changes

  • Tests

    • Automated tests added
    • OR
    • Test exception
    • OR
    • N/A
  • Documentation

    • Documentation PR or issue filled
    • OR
    • N/A

@@ -452,6 +452,10 @@ public override bool CanVerifySignedPackages(SignedPackageVerifierSettings verif
{
return false;
}
else if (RuntimeEnvironmentHelper.IsLinux || RuntimeEnvironmentHelper.IsMacOSX)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have a question, are we going to disable verification on Linux only, or on both Linux and MacOS?

Copy link
Contributor Author

@erdembayar erdembayar Mar 31, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@JonDouglas is trying to reach out Apple. If no answer then better than sorry we do for both.

@heng-liu heng-liu self-requested a review March 31, 2021 18:20
Copy link
Contributor

@heng-liu heng-liu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.
Good job!

@zivkan
Copy link
Member

zivkan commented Mar 31, 2021

This is a customer impacting feature. The issue should be moved to Home, so that the release notes tool will include it, and customers have an issue they can read for more details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Make default validation disabled on Linux, but enabled by default on Windows
5 participants