[Repository Signing] Add PROD repository signing certificate (#490)

Add the PROD repository signing certificate to Process Signature job.
NuGet · Jul 25, 2018 · 31d009a · 31d009a
1 parent c8ae143
commit 31d009a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json b/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json
@@ -19,7 +19,9 @@
     "ConnectionString": "DefaultEndpointsProtocol=https;AccountName=nugetgallery;AccountKey=$$Prod-NuGetGalleryStorage-Key$$"
   },
   "ProcessSignature": {
-    "AllowedRepositorySigningCertificates": [],
+    "AllowedRepositorySigningCertificates": [
+      "cf7ac17ad047ecd5fdc36822031b12d4ef078b6f2b4c5e6ba41f8ff2cf4bad67"
+    ],
     "V3ServiceIndexUrl": "https://api.nuget.org/v3/index.json"
   },
 

diff --git a/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs b/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs
@@ -420,7 +420,7 @@ private async Task<bool> IsValidRepositorySignatureAsync<T>(Context context, T s
                     context.Message.PackageId,
                     context.Message.PackageVersion,
                     context.Message.ValidationId,
-                    signature.V3ServiceIndexUrl.AbsoluteUri);
+                    signature.V3ServiceIndexUrl?.AbsoluteUri);
 
                 return false;
             }