Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[NuGet.org Bug]: Package validation failure emails use SHA1 thumbprints not SHA256 thumbprints #10307

Open
blowdart opened this issue Dec 12, 2024 · 2 comments

Comments

@blowdart
Copy link
Member

Impact

It's more difficult to complete my work

Describe the bug

nuget.org's certificate settings use SHA256 thumbprints in the display

image

However, the validation failure emails sent when a certificate has not been registered use SHA1 thumbprints

image

Repro Steps

  1. Create and sign a new package with a certificate that is not registered to your account
  2. Upload it, and wait for validation to fail because the certificate is not associated with the account
  3. Check the validation failed emails

Expected Behavior

The validation failed email uses SHA256 thumbprints, not SHA1 thumbprints

Screenshots

No response

Additional Context and logs

No response

@mariaghiondea
Copy link
Contributor

@ryuyu FYI for #10073

@erdembayar
Copy link
Contributor

@ryuyu
Triage meeting: We assigned the issue to you since you're already working on related issue, less context switch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants