From 7d375481bc742586bca1cc8d1cf0b658ac97f29f Mon Sep 17 00:00:00 2001
From: John Beisner <johnbeisner@users.noreply.github.com>
Date: Tue, 17 Apr 2018 16:53:03 -0700
Subject: [PATCH] Sign the 'nupkg' files; CLI:release/2.1.3xx (#9086)

* Sign the 'nupkg' files.
* Sign 'NuPkg' files with the 'NuGet' cert.
* Use "Microsoft402"
---
 build/Signing.proj | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/build/Signing.proj b/build/Signing.proj
index cb7b9fe78..4cd7f997a 100644
--- a/build/Signing.proj
+++ b/build/Signing.proj
@@ -5,6 +5,9 @@
     <!-- The signing infrastructure runs using MSBuild 14, which doesn't support some of the new syntax we're using.  So set the BuildingSingingProject
          property here to avoid importing files we don't need for signing which would cause errors if imported when using MSBuild 14. -->
     <BuildingSigningProject>true</BuildingSigningProject>
+    <ExternalCertificateId Condition="'$(ExternalCertificateId)' == ''">135020001</ExternalCertificateId>
+    <InternalCertificateId Condition="'$(InternalCertificateId)' == ''">Microsoft402</InternalCertificateId>
+    <NugetCertificateId Condition="'$(NugetCertificateId)' == ''">NuGet</NugetCertificateId>
   </PropertyGroup>
   
   <Import Project="..\dir.props" />
@@ -106,6 +109,10 @@
       <FilesToSign Include="$(PackagesDirectory)/**/*.cab">
         <Authenticode>$(InternalCertificateId)</Authenticode>
       </FilesToSign>
+      <FilesToSign Include="$(PackagesDirectory)/**/*.nupkg"
+                   Exclude="$(PackagesDirectory)/**/*symbols.nupkg">
+        <Authenticode>$(NugetCertificateId)</Authenticode>
+      </FilesToSign>
     </ItemGroup>
   </Target>