Skip to content
This repository has been archived by the owner on Jul 30, 2024. It is now read-only.
/ NuGet.Jobs Public archive

[Process Signature] Strip valid repository signatures #697

Merged
merged 5 commits into from
Dec 12, 2018

Conversation

loic-sharma
Copy link
Contributor

@loic-sharma loic-sharma commented Dec 11, 2018

Add a config to strip valid repository signatures. This will be used to re-reposign Microsoft packages.

Build: #2272834
Deployment: #8733
Part of https://github.com/NuGet/Engineering/issues/1964

@joelverhagen
Copy link
Member

If an admin revalidates a package for another reason, that means the hash will now change, right? This seems like most of the time it is an unintended side-effect. The only time we want this is when the Microsoft owner has the case mismatch. Can't we just re-reposign in a specific case, e.g.

  1. Owner casing does not match
  2. Package ID/version is in a whitelist
  3. Owner is Microsoft
  4. Validation message has a special flag

Perhaps in that meeting I missed we decided we don't care about package hash changes?

@loic-sharma
Copy link
Contributor Author

Talked to @joelverhagen offline. We will enable this feature only for a short window of time so that we can re-reposign Microsoft packages.

@loic-sharma
Copy link
Contributor Author

loic-sharma commented Dec 12, 2018

🔔 This feature branch is verified on DEV. Please review when possible :)

@loic-sharma loic-sharma merged commit ed45b4e into dev Dec 12, 2018
@loic-sharma loic-sharma deleted the loshar-resign-msft branch December 12, 2018 23:28
joelverhagen pushed a commit that referenced this pull request Oct 26, 2020
Add a config to strip valid repository signatures. This will be used to re-reposign Microsoft packages.

Part of https://github.com/NuGet/Engineering/issues/1964
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants