Assembly is not signed with strongname

[joseBuitragoSage]

I can't use de Nuget package beacouse the assembly is not signed with strongname.

[joseBuitragoSage]

I'm using Framework 4.8

[Miista]

Hi @joseBuitragoSage

I appreciate you reaching out. This is the first time I've experienced someone not being able to use the NuGet package due to strong naming.

I will look into it as soon as possible (tomorrow, hopefully but I can't promise).

How critical is it?

[joseBuitragoSage]

Thanks @Miista
I can't use this nuget. It's critical.
I've been trying all day to come up with a solution but it doesn't work.

[Miista]

@joseBuitragoSage: Can you supply a minimal example I can use for reproduction?

[joseBuitragoSage]

@Miista The Sample is easy,You only need to have a Unit Test project signed with strongname, you can install the Nuget package but when you try to execute it it doesn't work.

[Miista]

I have been able to reproduce the issue locally. I now need to find out how to sign the assembly. I read somewhere that this is not necessary for .NET Core and upwards.

[joseBuitragoSage]

I'm using framwork 4.8 and it's mandatory. You can sign the assembly in the properties of project with a snk file. You can generate this file.

[Miista]

@joseBuitragoSage I apologize for the delay. I hope to get some time to look into it tomorrow.

[joseBuitragoSage]

Thanks @Miista If you need something let me know

[Miista]

@joseBuitragoSage I apologize for the radio silence. I've been swamped lately. I will try to prioritize it.

I don't know very much about signing assemblies with strong naming. I'm a little concerned about the impact this might have on projects targeting .NET Core.
Do you have any insight on this?

[joseBuitragoSage]

HI @Miista. The impact will be positive. In terms of security, it is better because no one will be able to modify the assembly and also the reference will be with a public key. The problem is that if you sign your assemblies, the references you use have to be signed, otherwise not.

[Miista]

@joseBuitragoSage I have added a commit which adds strong name signing of Pose. I have yet to create a release.

I believe you could, however, check out the commit and verify it locally.