NuGet/Home

Add CLI option for `disableTLSCertificateValidation` property

Open

#14,061 opened on Jan 22, 2025

View on GitHub
 (1 comment) (2 reactions) (0 assignees)HTML (1,459 stars) (292 forks)batch import
Priority:3Type:Featurehelp wanted

Description

NuGet Product(s) Involved

NuGet.exe, dotnet.exe

The Elevator Pitch

Some time ago the property disableTLSCertificateValidation was added to nuget config sources (#12996, #13023, #13478). But this property is not represented by any CLI option so it needs to be added manually in the NuGet config file.

Similar to how allowInsecureConnections has a CLI option, I would suggest adding a CLI option to set the disableTLSCertificateValidation when using nuget sources add and dotnet nuget add source.

Additional Context and Details

No response

Contributor guide

Tech stack
csharp
Domain
clisecurity
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
C#NuGet internalsCLI design
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70
Research direction
Examine the existing implementation of 'allowInsecureConnections' CLI option in NuGet sources (see PRs #12996, #13023, #13478). Look at how the 'disableTLSCertificateValidation' property is used in config files and how the CLI option for 'allowInsecureConnections' was added. The relevant code is likely in the NuGet.Client repository under src/NuGet.Clients or similar. Focus on the command handlers for 'nuget sources add' and 'dotnet nuget add source' to understand the pattern for adding new options.
Add CLI option for `disableTLSCertificateValidation` property · NuGet/Home#14061 | Good First Issue