Signotaur - v1.0.0.502 Released

Hi All,

A new version of Signotaur has been released and is available from Signotaur Downloads. The latest stable version of Signotaur is 1.0.0.502.

Changes in v1.0.0.502

Server

  • Feature: New Events page providing administrators with visibility into signing activity, certificate usage, authentication attempts, warnings, and errors.

  • Feature: Added a Service Details button to the website footer. Clicking this provides information about the server operating system, server user account, .NET framework and runtime. This is only visible when logged in as an administrator.

  • Fix: The log file was not rolling over to a new file when the file size limit was reached.

Client

  • Update: Added --verify-cert-chain option to SignotaurTool sign command. This used to turn on certificate chain verification. The existing options --ignore-untrusted-root and --revocation-mode are only relevant to signing when this option is enabled.

  • Update: Added --revocation-mode option to SignotaurTool verify command. The verify command will now check the certificate chain by default unless --revocation-mode is set to ‘NoCheck’.

  • Update: Added --strict-lifetime option to SignotaurTool verify command. This can be used to strictly enforce signature validity to the certificate’s validity period when a timestamp is present.

Installer

  • Fix: If the SSL website certificate was defined by subject in the installer, the subject was lost when upgrading with the option to keep existing settings.

Core

  • Updated .NET SDK version to 9.0.302

  • Updates to third party packages.

Full change history

Introducing Signotaur