[Repository Signing] Add PROD repository signing certificate (#490)

loic-sharma · web-flow · commit 5b766ba5e6e1 · 2018-07-25T08:55:36.000-07:00
Add the PROD repository signing certificate to Process Signature job.
diff --git a/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json b/src/Validation.PackageSigning.ProcessSignature/Settings/prod.json
@@ -19,7 +19,9 @@
     "ConnectionString": "DefaultEndpointsProtocol=https;AccountName=nugetgallery;AccountKey=$$Prod-NuGetGalleryStorage-Key$$"
   },
   "ProcessSignature": {
-    "AllowedRepositorySigningCertificates": [],
+    "AllowedRepositorySigningCertificates": [
+      "cf7ac17ad047ecd5fdc36822031b12d4ef078b6f2b4c5e6ba41f8ff2cf4bad67"
+    ],
     "V3ServiceIndexUrl": "https://api.nuget.org/v3/index.json"
   },
 
diff --git a/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs b/src/Validation.PackageSigning.ProcessSignature/SignatureValidator.cs
@@ -420,7 +420,7 @@ private async Task<bool> IsValidRepositorySignatureAsync<T>(Context context, T s
                     context.Message.PackageId,
                     context.Message.PackageVersion,
                     context.Message.ValidationId,
-                    signature.V3ServiceIndexUrl.AbsoluteUri);
+                    signature.V3ServiceIndexUrl?.AbsoluteUri);
 
                 return false;
             }

Original file line number	Diff line number	Diff line change
`@@ -420,7 +420,7 @@ private async Task<bool> IsValidRepositorySignatureAsync<T>(Context context, T s`
`420`	`420`	`context.Message.PackageId,`
`421`	`421`	`context.Message.PackageVersion,`
`422`	`422`	`context.Message.ValidationId,`
`423`		`- signature.V3ServiceIndexUrl.AbsoluteUri);`
	`423`	`+ signature.V3ServiceIndexUrl?.AbsoluteUri);`
`424`	`424`
`425`	`425`	`return false;`
`426`	`426`	`}`