Table of Contents

Class Signature

Namespace
NuGet.Packaging.Signing
Assembly
Chocolatey.NuGet.Packaging.dll

Package signature information.

public abstract class Signature : ISignature
Inheritance
Signature
Implements
Derived
Inherited Members

Constructors

Signature(SignerInfo, SignatureType)

protected Signature(SignerInfo signerInfo, SignatureType type)

Parameters

signerInfo SignerInfo
type SignatureType

Properties

FriendlyName

public virtual string FriendlyName { get; }

Property Value

string

SignerInfo

SignerInfo for this signature.

public SignerInfo SignerInfo { get; }

Property Value

SignerInfo

Timestamps

Signature timestamps.

public IReadOnlyList<Timestamp> Timestamps { get; }

Property Value

IReadOnlyList<Timestamp>

Type

Indicates if this is an author or repository signature.

public SignatureType Type { get; }

Property Value

SignatureType

Methods

GetSignatureValue()

public abstract byte[] GetSignatureValue()

Returns

byte[]

GetSigningCertificateFingerprint(HashAlgorithmName)

public string GetSigningCertificateFingerprint(HashAlgorithmName algorithm)

Parameters

algorithm HashAlgorithmName

Returns

string

ThrowForInvalidSignature()

protected abstract void ThrowForInvalidSignature()

Verify(Timestamp, SignatureVerifySettings, HashAlgorithmName, X509Certificate2Collection)

Verify if the signature object meets the specification trust and validity requirements.

public virtual SignatureVerificationSummary Verify(Timestamp timestamp, SignatureVerifySettings settings, HashAlgorithmName fingerprintAlgorithm, X509Certificate2Collection certificateExtraStore)

Parameters

timestamp Timestamp

Timestamp for this signature, if signature is not timestamped it can be null.

settings SignatureVerifySettings
fingerprintAlgorithm HashAlgorithmName

Algorithm used to calculate and display the certificate's fingerprint.

certificateExtraStore X509Certificate2Collection

Collection of certificates to help the chain building engine as an extra store.

Returns

SignatureVerificationSummary

Status of trust for signature.

Remarks

This is only public for ease of testing