NuGet Warning NU3030
Package 'SamplePackage v1.0.0' from source 'https://contoso.com/index.json': The primary signature's timestamp's message imprint uses an unsupported hash algorithm.
Issue
The primary signature's timestamp's message imprint uses an unsupported hash algorithm.
Solution
Request the package author to re-sign the package using the nuget sign
command as described in NuGet docs using the -Timestamper
option such that the timestamp's message imprint uses one of the following hash algorithms -
SHA-2-256
SHA-2-384
SHA-2-512
Note
When running the nuget verify -signatures
command, NU3030 is raised as an error. Otherwise, NU3030 is raised as a warning.