NuGet Warning NU3014

Scenario 1

Package 'SamplePackage v1.0.0' from source 'https://contoso.com/index.json': The signing certificate does not meet a minimum public key length requirement.

Issue

The certificate used to sign the package does not meet the minimum public key length requirement.

Solution

Please ensure that the signing certificate has an RSA public key of length >= 2048 bits.

Scenario 2

Package 'SamplePackage v1.0.0' from source 'https://contoso.com/index.json': The primary signature's certificate does not meet a minimum public key length requirement.

Issue

The certificate used to sign the package does not meet the minimum public key length requirement.

Solution

Please ensure that the package was signed using a signing certificate with an RSA public key of length >= 2048 bits.

Note

When NuGet’s signature validation mode is set to accept (default), NU3014 is raised as a warning. When NuGet’s signature validation mode is set to require, or when running the nuget verify -signatures command, NU3014 is elevated from a warning to an error.