-
Notifications
You must be signed in to change notification settings - Fork 269
Closed
NuGet/NuGet.Client
#3992Labels
Functionality:SigningPriority:1High priority issues that must be resolved in the current sprint.High priority issues that must be resolved in the current sprint.Product:dotnet.exeType:Bug
Milestone
Description
Details about Problem
NuGet product used: dotnet.exe
dotnet.exe --version (if appropriate): 5.0.100
Detailed repro steps so we can see the same problem
dotnet nuget verify does not output anything by default:
PS > dotnet nuget verify --all .\newtonsoft.json.12.0.3.nupkg
PS > dotnet nuget verify .\newtonsoft.json.12.0.3.nupkg
No output is given at all for these commands. This is unfortunate as the verify command's output provides useful information when configuring trusted-signers (see this blog post).
However, command output is shown if I increase the verbosity to normal:
PS > dotnet nuget verify .\newtonsoft.json.12.0.3.nupkg --verbosity normal
Verifying Newtonsoft.Json.12.0.3
.\newtonsoft.json.12.0.3.nupkg
Signature Hash Algorithm: SHA256
Timestamp: 11/8/2019 4:56:46 PM
Verifying author primary signature's timestamp with timestamping service certificate:
Subject Name: CN=TIMESTAMP-SHA256-2019-10-15, O="DigiCert, Inc.", C=US
SHA1 hash: 0325BD505EDA96302DC22F4FA01E4C28BE2834C5
SHA256 hash: 481F4373272D98586C5364B6C115E82425675AEBFD9FACF7ADC464FA2FFFB8F0
Issued by: CN=DigiCert SHA2 Assured ID Timestamping CA, OU=www.digicert.com, O=DigiCert Inc, C=US
Valid from: 9/30/2019 5:00:00 PM to 10/16/2030 5:00:00 PM
Signature type: Author
Verifying the author primary signature with certificate:
Subject Name: CN=Json.NET (.NET Foundation), O=Json.NET (.NET Foundation), L=Redmond, S=wa, C=US, SERIALNUMBER=603 389 068
SHA1 hash: 4CFB89FAA49539A58968D81960B3C1258E8F6A34
SHA256 hash: A3AF7AF11EBB8EF729D2D91548509717E7E0FF55A129ABC3AEAA8A6940267641
Issued by: CN=.NET Foundation Projects Code Signing CA, O=.NET Foundation, C=US
Valid from: 10/24/2018 5:00:00 PM to 10/29/2021 5:00:00 AM
Timestamp: 11/8/2019 5:28:02 PM
Verifying repository countersignature's timestamp with timestamping service certificate:
Subject Name: CN=Symantec SHA256 TimeStamping Signer - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US
SHA1 hash: A9A4121063D71D48E8529A4681DE803E3E7954B0
SHA256 hash: C474CE76007D02394E0DA5E4DE7C14C680F9E282013CFEF653EF5DB71FDF61F8
Issued by: CN=Symantec SHA256 TimeStamping CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US
Valid from: 12/22/2017 4:00:00 PM to 3/22/2029 4:59:59 PM
Signature type: Repository
nuget-v3-service-index-url: https://api.nuget.org/v3/index.json
nuget-package-owners: jamesnk, newtonsoft
Verifying the repository countersignature with certificate:
Subject Name: CN=NuGet.org Repository by Microsoft, O=NuGet.org Repository by Microsoft, L=Redmond, S=Washington, C=US
SHA1 hash: 8FB6D7FCF7AD49EB774446EFE778B33365BB7BFB
SHA256 hash: 0E5F38F57DC1BCC806D8494F4F90FBCEDD988B46760709CBEEC6F4219AA6157D
Issued by: CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US
Valid from: 4/9/2018 5:00:00 PM to 4/14/2021 5:00:00 AM
Successfully verified package 'Newtonsoft.Json.12.0.3'.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Functionality:SigningPriority:1High priority issues that must be resolved in the current sprint.High priority issues that must be resolved in the current sprint.Product:dotnet.exeType:Bug
Type
Fields
Give feedbackNo fields configured for issues without a type.