Skip to content

Commit d1ca364

Browse files
authored
Update code signing chapter (#1597)
1 parent 9295fca commit d1ca364

File tree

1 file changed

+9
-12
lines changed

1 file changed

+9
-12
lines changed

Documentation/ReleasePlan.md

Lines changed: 9 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -102,18 +102,15 @@ This is the steps to release new packages to nuget.org
102102
Successfully created package 'D:\git\coverlet\bin\Release\Packages\coverlet.console.6.0.1-preview.6.g918cd179e0.snupkg'.
103103
```
104104

105-
4. Sign the packages using SignClient tool <https://www.nuget.org/packages/SignClient>
106-
107-
```powershell
108-
❯ SignClient "Sign" `
109-
>> --baseDirectory "REPO ROOT DIRECTORY\bin" `
110-
>> --input "**/*.nupkg" `
111-
>> --config "ROOT REPO DIRECTORY\eng\signclient.json" `
112-
>> --user "USER" `
113-
>> --secret "SECRET" `
114-
>> --name "Coverlet" `
115-
>> --description "Coverlet" `
116-
>> --descriptionUrl "https://github.com/coverlet-coverage/coverlet"
105+
4. Sign the packages using NuGetKeyVaultSignTool <https://www.nuget.org/packages/NuGetKeyVaultSignTool>
106+
107+
```
108+
❯ NuGetKeyVaultSignTool sign **/*.nupkg --file-digest sha256 --timestamp-rfc3161 http://timestamp.digicert.com --timestamp-digest sha256 `
109+
>> --azure-key-vault-url KEYVAULT-URL `
110+
>> --azure-key-vault-client-id CLIENT-ID `
111+
>> --azure-key-vault-tenant-id TENANT-ID `
112+
>> --azure-key-vault-client-secret KEYVAULT-SECRET `
113+
>> --azure-key-vault-certificate CERT-FRIENDLY-NAME
117114
```
118115
119116
5. Upload *.nupkg files to Nuget.org site. **Check all metadata(url links, deterministic build etc...) before "Submit"**

0 commit comments

Comments
 (0)