Signing validation for Arcade validation is failing

This build from Arcade validation is failing signing validation consistently: https://dnceng.visualstudio.com/internal/_build/results?buildId=543905&view=results

Previous build passed: https://dnceng.visualstudio.com/internal/_build/results?buildId=543556&view=results

Seems there was not change in SignTool in Arcade. I also don’t see any change in Arcade validation files related to signing.

The failure error is:

[File] Validation.1.0.0-prerelease.20152.5.nupkg, Signed: False
  [File] 8ccdda4c8ccc0950007bcad85d812703.dll, Signed: False, Full Name: lib/netcoreapp2.0/Validation.dll [Error] HRESULT: 800b0109 (A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider)
[File] Validation.Tests.1.0.0-prerelease.20152.5.nupkg, Signed: False
  [File] 9553bb952bf30e31a6ebfe78d1d305b1.dll, Signed: False, Full Name: lib/netcoreapp2.1/Validation.Tests.dll [Error] HRESULT: 800b0109 (A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider)

I downloaded the packages and they are signed but the Certificate seems bogus:

The SignTool logs indicate that the package/file was submitted correctly to the servers and signed properly.

/cc @MattGal

[JohnTortugo]

Yeah, real lucky. I confirmed by looking at the .dlls bits and they were indeed built from a Debug configuration.

I also think fixing only in Arcade-validation is better right now. AFAIU most repos have signing validation enabled and would catch this sort of thing (as it just did).

[mmitche]

Yeah, I think fixing in arcade-validaiton is the right place, though it might be interesting to see whether someone else is publishing from debug.