Hi All,
A new version of Signotaur has been released and is available from Signotaur Downloads. The latest stable version of Signotaur is 1.0.0.502.
Changes in v1.0.0.502
Server
-
Feature: New Events page providing administrators with visibility into signing activity, certificate usage, authentication attempts, warnings, and errors.
-
Feature: Added a Service Details button to the website footer. Clicking this provides information about the server operating system, server user account, .NET framework and runtime. This is only visible when logged in as an administrator.
-
Fix: The log file was not rolling over to a new file when the file size limit was reached.
Client
-
Update: Added
--verify-cert-chain
option to SignotaurToolsign
command. This used to turn on certificate chain verification. The existing options--ignore-untrusted-root
and--revocation-mode
are only relevant to signing when this option is enabled. -
Update: Added
--revocation-mode
option to SignotaurToolverify
command. The verify command will now check the certificate chain by default unless--revocation-mode
is set to ‘NoCheck’. -
Update: Added
--strict-lifetime
option to SignotaurToolverify
command. This can be used to strictly enforce signature validity to the certificate’s validity period when a timestamp is present.
Installer
- Fix: If the SSL website certificate was defined by subject in the installer, the subject was lost when upgrading with the option to keep existing settings.
Core
-
Updated .NET SDK version to 9.0.302
-
Updates to third party packages.