Enable Nuget signing and restore side-loaded appx transform

Author: zooba

windows-release/azure-pipelines.yml

@@ -165,9 +165,8 @@ stages:
     jobs:
     - template: stage-pack-nuget.yml
       parameters:
-        # Nuget signing is disabled because Azure Trusted Signing does not support it
-        #${{ if and(parameters.SigningCertificate, ne(parameters.SigningCertificate, 'Unsigned')) }}:
-        #  SigningCertificate: ${{ parameters.SigningCertificate }}
+        ${{ if and(parameters.SigningCertificate, ne(parameters.SigningCertificate, 'Unsigned')) }}:
+          SigningCertificate: ${{ parameters.SigningCertificate }}
         DoFreethreaded: ${{ parameters.DoFreethreaded }}
 
   - stage: Test

windows-release/stage-layout-msix.yml

@@ -69,14 +69,14 @@ jobs:
     env:
       TCL_LIBRARY: $(TclLibrary)
 
-  # HACK: Disabled to test because new signing tool shouldn't need this
-  #- powershell: |
-  #    $info = (gc "$(Pipeline.Workspace)\cert\certinfo.json" | ConvertFrom-JSON)
-  #    Write-Host "Side-loadable APPX must be signed with '$($info.Subject)'"
-  #    Write-Host "##vso[task.setvariable variable=APPX_DATA_PUBLISHER]$($info.Subject)"
-  #    Write-Host "##vso[task.setvariable variable=APPX_DATA_SHA256]$($info.SHA256)"
-  #  displayName: 'Override signing parameters'
-  #  condition: and(succeeded(), variables['SigningCertificate'])
+  # The dotnet sign tool shouldn't need this, but we do because of the sccd file
+  - powershell: |
+      $info = (gc "$(Pipeline.Workspace)\cert\certinfo.json" | ConvertFrom-JSON)
+      Write-Host "Side-loadable APPX must be signed with '$($info.Subject)'"
+      Write-Host "##vso[task.setvariable variable=APPX_DATA_PUBLISHER]$($info.Subject)"
+      Write-Host "##vso[task.setvariable variable=APPX_DATA_SHA256]$($info.SHA256)"
+    displayName: 'Override signing parameters'
+    condition: and(succeeded(), variables['SigningCertificate'])
 
   - powershell: |
       Remove-Item "$(Build.ArtifactStagingDirectory)\appx" -Recurse -Force -EA 0