Merge pull request #350 from NuGet/dev

[ReleasePrep][2018.02.27]RI of dev into master
NuGet · Feb 27, 2018 · 57315b9 · 57315b9
2 parents 4c07c23 + 6c62790
commit 57315b9
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/Validation.PackageSigning.ExtractAndValidateSignature/SignatureValidator.cs b/src/Validation.PackageSigning.ExtractAndValidateSignature/SignatureValidator.cs
@@ -202,11 +202,13 @@ private async Task<SignatureValidatorResult> HandleSignedPackageAsync(
                     new ClientSigningVerificationFailure(ex.Code.ToString(), ex.Message));
             }
 
+            // Mark this package as signed. This needs to happen before the extraction due to a foreign key constraint.
+            var result = await AcceptAsync(packageKey, message, PackageSigningStatus.Valid);
+
             // Extract all of the signature artifacts and persist them.
             await _signaturePartsExtractor.ExtractAsync(packageKey, signedPackageReader, cancellationToken);
 
-            // Mark this package as signed.
-            return await AcceptAsync(packageKey, message, PackageSigningStatus.Valid);
+            return result;
         }
 
         private async Task<SignatureValidatorResult> GetVerifyResult(