search

Zaid-Ajaj / Femto

Femto is a CLI tool that automatically resolves npm packages used by Fable bindings
153 stars 13 forks source link

dotnet tool restore femto results in a nuget error: The repository primary signature validity period has expired. #85

Closed kurt-mueller-osumc closed 2 years ago

kurt-mueller-osumc commented 3 years ago

Currently I can't restore the femto tool:

% dotnet tool restore
warning NU3028: Package 'Femto 0.9.0' from source 'https://api.nuget.org/v3/index.json': The repository primary signature's timestamp found a chain building issue: ExplicitDistrust: The trust setting for this policy was set to Deny.
error NU3037: Package 'Femto 0.9.0' from source 'https://api.nuget.org/v3/index.json': The repository primary signature validity period has expired.

Package "femto" failed to restore, due to Microsoft.DotNet.ToolPackage.ToolPackageException: The tool package could not be restored.
   at Microsoft.DotNet.Tools.Tool.Install.ProjectRestorer.Restore(FilePath project, PackageLocation packageLocation, String verbosity)
   at Microsoft.DotNet.ToolPackage.ToolPackageInstaller.InstallPackageToExternalManagedLocation(PackageLocation packageLocation, PackageId packageId, VersionRange versionRange, String targetFramework, String verbosity)
   at Microsoft.DotNet.Tools.Tool.Restore.ToolRestoreCommand.InstallPackages(ToolManifestPackage package, Nullable`1 configFile)
Zaid-Ajaj commented 3 years ago

I don't know why v0.9.0 can't be restored to be honest. Can you try restoring the latest version?

kurt-mueller-osumc commented 3 years ago

Sure! I just downloaded the news SAFE Stack template and followed the "Quick Start" instructions.

kurt-mueller-osumc commented 3 years ago

Hey Zaid, it successfully restores but with a warning:

 dotnet tool restore
warning NU3028: Package 'Femto 0.12.0' from source 'https://api.nuget.org/v3/index.json': The repository primary signature's timestamp found a chain building issue: ExplicitDistrust: The trust setting for this policy was set to Deny.
Zaid-Ajaj commented 2 years ago

@kurt-mueller-osumc Femto is published to the official package registry https://api.nuget.org/v3/index.json and according to your warning, it says there is an "ExplicitDistrust" so I assume this is something from your own system.

Please re-open the issue if you believe that is not the case