Hi All,
A new version of Signotaur has been released and is available from Signotaur Downloads. The latest stable version of Signotaur is 1.2.0.107.
Changes in v1.2.0.107
New Features
- Remote Desktop Protocol (
.rdp) file signing is now supported, including timestamping and verification.
Improvements
-
The server now returns the certificate chain with each signing certificate, removing the client’s dependency on AIA fetching in firewalled or air-gapped environments.
-
CMS, NuGet, VSIX and RDP files are now signed in parallel within a batch for faster throughput.
-
The
--separate-timestampoption is now respected when signing CMS, NuGet, VSIX and RDP files, not just Authenticode files.
Changes
-
New DSA certificate registrations are now rejected. DSA was withdrawn by NIST FIPS 186-5 and is no longer validated by code-signing runtimes. Existing registered DSA certificates continue to work.
-
A warning is now shown when an ECDSA certificate is used with
--add-sha1-signature, as Authenticode dual-signing with ECDSA primary signatures is not supported by the Microsoft Trusted Root Program. -
Warnings are now shown when CLI options are passed but have no effect on the specified file types.
Bug Fixes
- Fixed the server web UI footer showing “Forbidden” for non-administrator users.
Infrastructure
-
Updated .NET SDK to v10.0.202.
-
Third-party package updates.