Signotaur v1.2.0.107

Released: Apr 23, 2026

Aggiornamenti in v1.2.0.107

Funzionalità

  • Remote Desktop Protocol (.rdp) file signing is now supported, including timestamping and verification.
  • The server now returns the certificate chain with each signing certificate, removing the client's dependency on AIA fetching in firewalled or air-gapped environments.
  • CMS, NuGet, VSIX and RDP files are now signed in parallel within a batch for faster throughput.
  • The --separate-timestamp option is now respected when signing CMS, NuGet, VSIX and RDP files, not just Authenticode files.
  • New DSA certificate registrations are now rejected. DSA was withdrawn by NIST FIPS 186-5 and is no longer validated by code-signing runtimes. Existing registered DSA certificates continue to work.
  • A warning is now shown when an ECDSA certificate is used with --add-sha1-signature, as Authenticode dual-signing with ECDSA primary signatures is not supported by the Microsoft Trusted Root Program.
  • Warnings are now shown when CLI options are passed but have no effect on the specified file types.
  • Infrastructure:
    • Updated .NET SDK to v10.0.202.
    • Third-party package updates.

Correzioni

  • Fixed the server web UI footer showing "Forbidden" for non-administrator users.