Skip to content

.NET 8 SDK: enable signed package verification by default on Linux#5006

Merged
dtivel merged 1 commit intodevfrom
dev-dtivel-enable-by-default
Jan 18, 2023
Merged

.NET 8 SDK: enable signed package verification by default on Linux#5006
dtivel merged 1 commit intodevfrom
dev-dtivel-enable-by-default

Conversation

@dtivel
Copy link
Contributor

@dtivel dtivel commented Jan 12, 2023

Bug

Fixes: NuGet/Home#11262

Regression? Last working version:

Description

This change re-enables signed package verification by default on Linux for .NET 8 SDK Preview 1. Verification remains disabled by default on macOS.

With this .NET 7 SDK-era change, there are no known major blockers to enabling verification by default on Linux. As always, the DOTNET_NUGET_SIGNATURE_VERIFICATION environment variable provides an escape hatch, if necessary.

CC @aortiz-msft, @skofman1, @richlander

PR Checklist

@dtivel dtivel requested a review from a team as a code owner January 12, 2023 17:40
erdembayar
erdembayar previously approved these changes Jan 12, 2023
@richlander
Copy link

Does the .NET 8 overall plan include the split of the CTL into two files? As I recall, the lack of that approach was the problem we ran into earlier.

@dtivel
Copy link
Contributor Author

dtivel commented Jan 18, 2023

@richlander, yes, .NET 8 SDK already has the 2 separate CTL files, as described here.

@dtivel dtivel merged commit 9836b44 into dev Jan 18, 2023
@dtivel dtivel deleted the dev-dtivel-enable-by-default branch January 18, 2023 12:12
dtivel added a commit that referenced this pull request Jan 26, 2023
aortiz-msft pushed a commit that referenced this pull request Jan 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Signing: re-enable signed package verification on Linux and macOS

5 participants