NuGet / Insights

Gather insights about public NuGet.org package data
Apache License 2.0
25 stars 7 forks source link

Add table for package signing certificate chains #23

Closed loic-sharma closed 2 years ago

loic-sharma commented 3 years ago

Add a table to answer questions like:

This table should contain all certificates used to author sign, repository sign, or timestamp packages. This certificate data should be joinable against JverPackageSignatures.

Consider reusing: https://github.com/NuGet/NuGet.Jobs/blob/main/src/Validation.PackageSigning.ValidateCertificate/OnlineCertificateVerifier.cs

joelverhagen commented 2 years ago

One perspective of certificates to consider: https://github.com/NuGet/Engineering/issues/1430

joelverhagen commented 2 years ago

This is done. I haven't done anything with XCA yet. That can be added later if needed.