Skip to content

Commit

Permalink
Update release_NupkgAudit.ps1 (#2128)
Browse files Browse the repository at this point in the history
* Update release_NupkgAudit.ps1

removing the hardcoded hash.
will put the value in the build definition. This will be easier to update when certs rotate.

* Update release_NupkgAudit.ps1

punctuation
  • Loading branch information
TimothyMothra committed Dec 18, 2020
1 parent 5c39cfe commit 84f35d2
Showing 1 changed file with 6 additions and 3 deletions.
9 changes: 6 additions & 3 deletions .scripts/release_NupkgAudit.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -17,10 +17,13 @@ Param(
[bool]
$verboseLog,

[Parameter(Mandatory=$false,HelpMessage="Full Log?:")]
[Parameter(Mandatory=$false,HelpMessage="Enable or disable signing verification:")]
[bool]
$verifySigning = $true
$verifySigning = $true,

[Parameter(Mandatory=$false,HelpMessage="Enable or disable signing verification:")]
[string]
$expectedCertHash = ""
)


Expand Down Expand Up @@ -107,7 +110,7 @@ function Test-MultiCondition ([bool]$requiredCondition, [bool]$recommendedCondit

function Get-IsPackageSigned([string]$nupkgPath) {
$verifyOutput = "";
$null = & $nugetExePath verify -signature -CertificateFingerprint 3F9001EA83C560D712C24CF213C3D312CB3BFF51EE89435D3430BD06B5D0EECE $nupkgPath -verbosity detailed 2>&1 | Tee-Object -Variable verifyOutput
$null = & $nugetExePath verify -signature -CertificateFingerprint $expectedCertHash $nupkgPath -verbosity detailed 2>&1 | Tee-Object -Variable verifyOutput

#TEST OUTPUT
Write-Host $verifyOutput
Expand Down

0 comments on commit 84f35d2

Please sign in to comment.