Re-Sign NuGet Packages

[taspeotis-xt]

Can the NuGet packages please be re-signed? The signatures are not valid right now:

/home/runner/work/***/***/src/***/***.csproj :
  error NU3012: Package 'Refit 10.1.6' from source 'https://api.nuget.org/v3/index.json':
  The author primary signature found a chain building issue: Revoked: certificate revoked
/home/runner/work/***/***/src/***/***.csproj :
  error NU3012: Package 'Refit.HttpClientFactory 10.1.6' from source 'https://api.nuget.org/v3/index.json':
  The author primary signature found a chain building issue: Revoked: certificate revoked

Signing cert (now revoked):

Subject Name: CN=Glenn Watson, O=Glenn Watson, L=Mooroolbark, S=Victoria, C=AU
SHA256 hash:  09702DACA40821B9E2F12DF12FB32479AD60F6C5C73A69E3EB35E06C9C3F898B
Valid from:   02/21/2026 06:49:49 to 02/20/2027 06:49:49

Affects at least Refit and Refit.HttpClientFactory 10.1.6 from nuget.org.

[taspeotis-xt]

I have checked the public CRL http://crls.ssl.com/SSLcom-SubCA-CodeSigning-RSA-4096-R1.crl:

Serial Number:   051d6c7b8aedf6b077d4a1b8942c8df2
Revocation Date: 2026-06-02 16:32 UTC

[ozsvart-karoly-nx]

This problem is blocking our operations (CI builds, etc.) and the workaround (DOTNET_NUGET_SIGNATURE_VERIFICATION: "false") is unsecure.

Please treat this issue as top priority. 🙏

Also, please be assured that the work you do with this repository is important, many people like this nuget package, and we are grateful for it! ❤️

[xIceFox]

Just woke up and saw our CI Builds failing. Would appreciate a fast fix.

[dlerps]

Are there information about the reason behind the revocation? It doesn't seem it expired but was actively revoked.

[UsmanSabir]

any update?

[theelicht]

This problem is blocking our operations (CI builds, etc.) and the workaround (DOTNET_NUGET_SIGNATURE_VERIFICATION: "false") is unsecure.

Please treat this issue as top priority. 🙏

Also, please be assured that the work you do with this repository is important, many people like this nuget package, and we are grateful for it! ❤️

+1

[josegers-nieuwestroom]

Some update from the maintainers would be welcome. At least give us the reason why the certificate was revoked. Is there an active security risk with the 10.1.6 version, should we take action, can we expect a fix soon?

[markus-codechefs]

We have the same issue our CI is blocked due to this dependency. Thanks for an update

[osa0805]

Same here

[xIceFox]

On windows btw it still restores. On linux it breaks, just reproduced it locally. I think windows certificate revocation policy is not as strict.

[Tanzy]

Getting the same issue, had to roll to version 10.0.1 to work about it

[theelicht]

I've taken the same workaround as @Tanzy for now. Patiently awaiting a response from the devs for v10.1.6.

[ozsvart-karoly-nx]

Slightly off topic: can someone please explain why rolling back to 10.0.1 solves this issue?