Provide faster feedback to package author when uploaded package does not match signature requirements

[joelverhagen]

@joelverhagen commented on Tue Jul 17 2018

When a package must be signed, we can quickly reject an unsigned version by checking for the presence of a signature file.

When a package must not be signed, we can quickly reject a signed version by checking for the presence of a signature file.

Both operations are safe to be done in gallery process.

---

@joelverhagen commented on Tue Jul 17 2018

I need text for both cases and for both the upload flow and the command line push flow.

/cc @anangaur

[joelverhagen]

Proposed strings for both web UI and command line.

When publishing an unsigned package and signing is required:

This package must be signed with a registered certificate.

When publishing a signed package and no certificate is configured.

The package was signed. You must register the signing certificate to publish signed packages.

@anangaur?