System.Formats.Cbor.Tests.DataModel.fsproj gets compiled with --publicsign+ when DotNetBuildSourceOnly=true

[tmds]

System.Formats.Cbor.Tests.DataModel.fsproj fails to compile on Fedora/RHEL with DotNetBuildSourceOnly=true.

A call to StrongNameSignatureSize failed (Invalid Public Key blob) [/var/home/tmds/repos/runtime/src/libraries/System.Formats.Cbor/tests/CborDocument/System.Formats.Cbor.Tests.DataModel.fsproj]

When DotNetBuildSourceOnly is set to true, the strong name signing should be disabled. This is no longer the case for this project.

Perhaps this regressed in dotnet/arcade#15303.

cc @ViktorHofer @mmitche @omajid

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/area-infrastructure-libraries
See info in area-owners.md if you want to be subscribed.

[tmds]

I found #105486 which is about the same problem and for which dotnet/fsharp#17451 got created.

When PublicSign is false, then the system must provide RSA+SHA1. To enable source-building on systems that don't allow RSA+SHA1, source-build changes PublicSign to true via FullAssemblySigningSupported=false.

However, with PublicSign=true doesn't work for the F# compiler as reported dotnet/fsharp#17451.

We weren't using PublicSign=true before (pre .NET 10) when building this F# project but that seems to have changed, I assume due to dotnet/arcade#15303.

For #105486 the F# project was using PublicSign=true due to adding /p:FullAssemblySigningSupported=false to try fix the RSA+SHA1 issue, but then ran into the F# compiler issue instead.

cc @vcsjones

[vcsjones]

@tmds can this be closed now that dotnet/arcade#15380 is merged?