MQTTnet.dll in nuget package not signed

[maongit]

Is it deliberate that the MQTTnet.dll in MQTTnet 4.2.1.781 published on nuget is not digitally signed?

Some clients are starting to reject installation of any executable or dll that is not signed. We could build and sign ourselves, but then we loose the convenience of just pulling the latest release from nuget.

Thanx in advance.

[CZEMacLeod]

It doesn't appear that the nuget package is signed either...

[chkr1011]

The assemblies do have a strong name but the nuget is indeed not signed.

[CZEMacLeod]

@chkr1011 I think @maongit is referring to a 'code signing' digital signature on the DLL, not a strong name. e.g. It isn't signed using SignTool.

[chkr1011]

I created a ticket at the .NET Foundation so that this project can get a signing certificate.

https://github.com/dotnet-foundation/projects/issues/337

[chkr1011]

Starting with version 4.3.5.x the nuget and its DLLs are properly signed.