diff --git a/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json b/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json index 6e6021b58..d195c2287 100644 --- a/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json +++ b/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json @@ -19,7 +19,9 @@ "ConnectionString": "DefaultEndpointsProtocol=https;AccountName=nugetgallery;AccountKey=$$Prod-NuGetGalleryStorage-Key$$" }, "ProcessSignature": { - "AllowedRepositorySigningCertificates": [], + "AllowedRepositorySigningCertificates": [ + "cf7ac17ad047ecd5fdc36822031b12d4ef078b6f2b4c5e6ba41f8ff2cf4bad67" + ], "V3ServiceIndexUrl": "https://api.nuget.org/v3/index.json" }, diff --git a/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs b/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs index 9016dba69..57b3c872a 100644 --- a/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs +++ b/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs @@ -420,7 +420,7 @@ private async Task IsValidRepositorySignatureAsync(Context context, T s context.Message.PackageId, context.Message.PackageVersion, context.Message.ValidationId, - signature.V3ServiceIndexUrl.AbsoluteUri); + signature.V3ServiceIndexUrl?.AbsoluteUri); return false; }