Skip to content

Breaking change: dotnet nuget verify outputs CRL and OCSP URLs (.NET 10.0.400 SDK)#53563

Open
Copilot wants to merge 3 commits intomainfrom
copilot/dotnet-nuget-verify-add-urls
Open

Breaking change: dotnet nuget verify outputs CRL and OCSP URLs (.NET 10.0.400 SDK)#53563
Copilot wants to merge 3 commits intomainfrom
copilot/dotnet-nuget-verify-add-urls

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 5, 2026

Documents the behavioral breaking change where dotnet nuget verify now emits CRL and OCSP URLs for each certificate in the signature chain. Users parsing this output in automation must update their logic—CRL URL is no longer a unique key per certificate block.

Changes

  • New article docs/core/compatibility/sdk/10.0/dotnet-nuget-verify-crl-ocsp-urls.md — covers previous/new behavior with diff example, reason (user request for URL visibility), and recommended action for automation consumers
  • docs/core/compatibility/10.md — adds entry to SDK and MSBuild breaking changes table
  • docs/core/compatibility/toc.yml — adds TOC entry under SDK 10.0
  • docs/core/tools/dotnet-nuget-verify.md — notes the new output in the description and adds CRL URL / OCSP URL rows to the verbosity table (shown at minimal and above)

New output (normal verbosity, .NET 10.0.400+)

  Valid from: 2023-07-27 9:30:00 AM to 2026-10-18 10:29:59 AM
+ CRL URL: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl
+ CRL URL: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl
+ OCSP URL: http://ocsp.digicert.com

Internal previews

📄 File 🔗 Preview link
docs/core/compatibility/10.md docs/core/compatibility/10
docs/core/compatibility/sdk/10.0/dotnet-nuget-verify-crl-ocsp-urls.md docs/core/compatibility/sdk/10.0/dotnet-nuget-verify-crl-ocsp-urls
docs/core/compatibility/toc.yml docs/core/compatibility/toc
docs/core/tools/dotnet-nuget-verify.md docs/core/tools/dotnet-nuget-verify

Copilot AI changed the title [WIP] Add CRL and OSCP URLs to dotnet nuget verify output Breaking change: dotnet nuget verify outputs CRL and OCSP URLs (.NET 10.0.400 SDK) May 5, 2026
Copilot AI requested a review from gewarren May 5, 2026 18:04
@gewarren gewarren marked this pull request as ready for review May 5, 2026 18:33
@gewarren gewarren requested a review from meaghanlewis as a code owner May 5, 2026 18:33
Copilot AI review requested due to automatic review settings May 5, 2026 18:33
@gewarren gewarren requested a review from a team as a code owner May 5, 2026 18:33
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR documents a .NET 10.0.400 SDK breaking change in dotnet nuget verify so readers know the command now emits CRL and OCSP URLs and automation that parses the output might need updates.

Changes:

  • Adds a new breaking-change article for the dotnet nuget verify output change.
  • Adds the new article to the .NET 10 compatibility index and compatibility TOC.
  • Updates the dotnet nuget verify command doc to mention the new output and extend the verbosity table.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
docs/core/tools/dotnet-nuget-verify.md Updates the command reference to mention CRL/OCSP output and adds verbosity-table rows.
docs/core/compatibility/toc.yml Adds the new breaking-change article to the compatibility TOC under SDK and MSBuild.
docs/core/compatibility/sdk/10.0/dotnet-nuget-verify-crl-ocsp-urls.md Adds the new breaking-change article with previous/new behavior, reason, and recommended action.
docs/core/compatibility/10.md Adds the breaking-change entry to the .NET 10 compatibility index.

Comment thread docs/core/tools/dotnet-nuget-verify.md
Comment thread docs/core/tools/dotnet-nuget-verify.md Outdated
Comment thread docs/core/compatibility/sdk/10.0/dotnet-nuget-verify-crl-ocsp-urls.md Outdated
Comment thread docs/core/compatibility/sdk/10.0/dotnet-nuget-verify-crl-ocsp-urls.md Outdated
…dd Timestamp cert rows to verbosity table

Agent-Logs-Url: https://github.com/dotnet/docs/sessions/7255bc3d-b486-49d5-b541-6ace8d18b209

Co-authored-by: gewarren <24882762+gewarren@users.noreply.github.com>
Copilot AI requested a review from gewarren May 5, 2026 18:40
@gewarren gewarren requested a review from zivkan May 5, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Breaking change]: dotnet nuget verify shows CRL and OSCL URLs

3 participants