search

totpero / DeviceDetector.NET

The Universal Device Detection library will parse any User Agent and detect the browser, operating system, device used (desktop, tablet, mobile, tv, cars, console, etc.), brand and model.
Apache License 2.0
348 stars 73 forks source link

Cannot add nuget package #49

Closed Archanian closed 2 years ago

Archanian commented 3 years ago

Attempting to add this package results in a certificate validation error (looks like a certificate has expired?). Can anyone else confirm this is the case, and if so is there a recommended workaround (aside from disabling cert verification in nuget config).

Command: dotnet add package DeviceDetector.NET --version 4.3.0 Output:

info : Restoring packages for ...
info :   CACHE https://api.nuget.org/v3-flatcontainer/semver/index.json
info :   GET https://artifacts.postmark.ci.wildbit.com/nuget/libraries/flatcontainer/semver/index.json
info :   CACHE https://api.nuget.org/v3-flatcontainer/semver/2.0.6/semver.2.0.6.nupkg
info : Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': Signature Hash Algorithm: SHA256
info : Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': Timestamp: 2019-12-27 7:12:26 PM
info : Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': Verifying repository primary signature's timestamp with timestamping service certificate:
info :   Subject Name: CN=Symantec SHA256 TimeStamping Signer - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US
info :   SHA1 hash: A9A4121063D71D48E8529A4681DE803E3E7954B0
info :   SHA256 hash: C474CE76007D02394E0DA5E4DE7C14C680F9E282013CFEF653EF5DB71FDF61F8
info :   Issued by: CN=Symantec SHA256 TimeStamping CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US
info :   Valid from: 2017-12-22 4:00:00 PM to 2029-03-22 4:59:59 PM
warn : NU3028: Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': The repository primary signature's timestamp found a chain building issue: ExplicitDistrust: The trust setting for this policy was set to Deny.
info : Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': Signature type: Repository
info : Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': nuget-v3-service-index-url: https://api.nuget.org/v3/index.json
info : Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': nuget-package-owners: maxhauser, WalkerCodeRanger
info : Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': Verifying the repository primary signature with certificate:
info :   Subject Name: CN=NuGet.org Repository by Microsoft, O=NuGet.org Repository by Microsoft, L=Redmond, S=Washington, C=US
info :   SHA1 hash: 8FB6D7FCF7AD49EB774446EFE778B33365BB7BFB
info :   SHA256 hash: 0E5F38F57DC1BCC806D8494F4F90FBCEDD988B46760709CBEEC6F4219AA6157D
info :   Issued by: CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US
info :   Valid from: 2018-04-09 5:00:00 PM to 2021-04-14 5:00:00 AM
error: NU3037: Package 'Semver 2.0.6' from source 'https://api.nuget.org/v3/index.json': The repository primary signature validity period has expired.
Archanian commented 3 years ago

You know what ... I think this may be a larger issue with nuget, cleared my local cache and now I'm getting similar errors with all packages.