You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If a package author tries to upload
a) a signed package without a registered signing key, or
b) an unsigned package when a signing key is registered,
...the package will not be uploaded and no error message will be shown to the author.
The only way to find any kind of information is to open the DevTools and inspect the HTTP response. The HTTP response will look something like
Repro Steps
See above
Expected Behavior
The error message is shown to the user, and it clearly explains what the author must do in order to upload the package. The error message in the HTTP response is not be sufficient.
Links to documentation that articulates the necessity would also be helpful.
A slight necessary OT: our organisation maintains several packages some of which are signed and some of which aren't. We can't sign all of the packages (and it's besides the point). Up until recently we published all packages without issues, and now when I tried to upload a new version of the signed package I couldn't do it. After some head scratching and investigations, essentially I was forced to register the signing key. And after that I could no longer upload a new version of the unsigned package.... If this is now "by design" this has to be explained, as well as steps to resolve such situations should be provided. "Sign all your packages" may not be an option.
Screenshots
No response
Additional Context and logs
No response
The text was updated successfully, but these errors were encountered:
Impact
I'm unable to use NuGet.org
Describe the bug
If a package author tries to upload
a) a signed package without a registered signing key, or
b) an unsigned package when a signing key is registered,
...the package will not be uploaded and no error message will be shown to the author.
The only way to find any kind of information is to open the DevTools and inspect the HTTP response. The HTTP response will look something like
Repro Steps
See above
Expected Behavior
The error message is shown to the user, and it clearly explains what the author must do in order to upload the package. The error message in the HTTP response is not be sufficient.
Links to documentation that articulates the necessity would also be helpful.
A slight necessary OT: our organisation maintains several packages some of which are signed and some of which aren't. We can't sign all of the packages (and it's besides the point). Up until recently we published all packages without issues, and now when I tried to upload a new version of the signed package I couldn't do it. After some head scratching and investigations, essentially I was forced to register the signing key. And after that I could no longer upload a new version of the unsigned package....
If this is now "by design" this has to be explained, as well as steps to resolve such situations should be provided. "Sign all your packages" may not be an option.
Screenshots
No response
Additional Context and logs
No response
The text was updated successfully, but these errors were encountered: