[Client policy] An error NU3018 “The author primary signature's signing certificate is not trusted by the trust provider” occurs when Install package with trusted signers and package with untrusted root

[CiciLi1]

[Client policy] An error NU3018 “The author primary signature's signing certificate is not trusted by the trust provider” occurs when Install package with trusted signers and package with untrusted root

[dtivel]

@CiciLi1, if it helps, Visual Studio has a command which can take the selected text and make it upper case.

[martinrrm]

I wasn't able to reproduce this in my local machine, VS version Version 17.9.0 Preview 1.0 and I didn't patched SDK, using 8.0.200-preview.23624.5

[CiciLi1]

Hi @martinrrm,I verified this issue with the unpatched SDK using 8.0.200-preview.23620.12, this issue can also be reproduced as below:

[nkolev92]

Team Triage: Hey @dtivel, would you mind taking a look at this issue, and help us understand whether there's a test setup issue or a product issue.

Thanks!

[dtivel]

@CiciLi1, you said that previously this test passed when you used CreateTestCertificate.ps1. Can you please provide the exact statement you used for CreateTestCertificate.ps1 --- all arguments. In particular, did you use -AddAsTrustedRootAuthority?

[CiciLi1]

@CiciLi1, you said that previously this test passed when you used CreateTestCertificate.ps1. Can you please provide the exact statement you used for CreateTestCertificate.ps1 --- all arguments. In particular, did you use -AddAsTrustedRootAuthority?

Hi @dtivel, we previously used the exact statement in the nuget client Dev\6.8.0.101 with the statement `. \CreateTestCertificate.ps1" and did not use "-AddAsTrustedRootAuthority".

[dtivel]

@CiciLi1, I'm going to guess that you're copying the SHA-256 fingerprint output by MakeTestCert into your nuget.config file and it fails. However, if you upper-case the fingerprint in nuget.config, it should succeed.

Please confirm.

[CiciLi1]

@CiciLi1, I'm going to guess that you're copying the SHA-256 fingerprint output by MakeTestCert into your nuget.config file and it fails. However, if you upper-case the fingerprint in nuget.config, it should succeed.

Please confirm.

Hi @dtivel, the case work well when the fingerprint is upper-case in the nuget.config file, I will close this issue. Thanks for your help.