From 31d009ab33b6096cfca15131fcbc98858a37577a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lo=C3=AFc=20Sharma?= <sharma.loic@gmail.com>
Date: Wed, 25 Jul 2018 08:55:36 -0700
Subject: [PATCH] [Repository Signing] Add PROD repository signing certificate
 (#490)

Add the PROD repository signing certificate to Process Signature job.
---
 .../Settings/prod.json                                        | 4 +++-
 .../SignatureValidator.cs                                     | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json b/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json
index 6e6021b58..d195c2287 100644
--- a/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json
+++ b/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json
@@ -19,7 +19,9 @@
     "ConnectionString": "DefaultEndpointsProtocol=https;AccountName=nugetgallery;AccountKey=$$Prod-NuGetGalleryStorage-Key$$"
   },
   "ProcessSignature": {
-    "AllowedRepositorySigningCertificates": [],
+    "AllowedRepositorySigningCertificates": [
+      "cf7ac17ad047ecd5fdc36822031b12d4ef078b6f2b4c5e6ba41f8ff2cf4bad67"
+    ],
     "V3ServiceIndexUrl": "https://api.nuget.org/v3/index.json"
   },
 
diff --git a/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs b/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs
index 9016dba69..57b3c872a 100644
--- a/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs
+++ b/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs
@@ -420,7 +420,7 @@ private async Task<bool> IsValidRepositorySignatureAsync<T>(Context context, T s
                     context.Message.PackageId,
                     context.Message.PackageVersion,
                     context.Message.ValidationId,
-                    signature.V3ServiceIndexUrl.AbsoluteUri);
+                    signature.V3ServiceIndexUrl?.AbsoluteUri);
 
                 return false;
             }