Signotaur 1.0 Version History
v1.0.0.444
April 8th, 2025
Changes
- Fix: We were not checking whether a user was locked out, disabled or password was expired when logging in
- Fix: Temporary password status was not reset after password change, resulting in redirection to change password page
- Fix: Issue where a user cannot be deleted if it has been assign certificate access
- Fix: Installer now ensures all parent directories are created to prevent error when copying server SSL certificate
- Fix: Issues with certificate access dialog boxes on users and certificate administration pages not being populated on first open and refreshing after save and reopen
- Fix: User enabled/disabled status was not updated in database when editing user details
- Update: Expiration times for temporary passwords, email verification, password reset links, remember me and 2FA remember code can now be specified in the server configuration file. The defaults are 30 minutes for password reset, 12 hours for email verification, one hour for temporary passwords, 14 days for remember me and 30 days for 2FA remember code.
- Update: Now displaying an icon on the users administration page to indicate if a user has been locked out or disabled.
- Update: Added --revocation-mode option to client, for specifying how to check for certificate revocation when building the certificate chain. This can be 'Online' to perform live checks (default); 'Offline' to skip online checks using cached data. This can significantly improve signing speed when firewall or network issues block CRL/OCSP requests; or 'NoCheck' to disable all revocation validation, increasing the risk of accepting revoked certificates.
- Update: Installation is now aborted on unsupported operation systems. Signotaur currently supports Windows 10 / Server 2016 and above.
- Updates to some third party packages.
v1.0.0.423
March 11th, 2025
Changes
- Feature: Added support to client tool for an enhanced file list format with descriptions and URLs for each file. Each line in the file list now follows the format: FilePath|Description|URL. See --file-list option in (sign command documentation for further details.
- Update: Email settings now allow configuration of a server without authentication, e.g. with blank username and password.
- Update: Added secure sockets mode selection to email settings for specifying the type of the SSL and/or TLS encryption that should be used when connecting.
- Update: Removed "Use HTTPS" option from installers. HTTPS is required.
- Update: Added --encoding option to all command lines. This can be set to one of UTF8, UTF16, OEMCodePage or CodePage### where ### is the number of the code page to use. The default is UTF8. Note: This is a change to the previous command output which was set to Unicode/UTF16.
- Update: Added minor hints and information to client tool command line.
- Fix: Validation errors were not displayed when sending a test email message. This has now been corrected.
- Updates to some third party packages.
v1.0.0.360
December 19th, 2024
Changes
- Update: Added timestamp command to client tool.
- Update: Added verify command to client tool.
- Update: Added fallback timestamp server and verify options to sign command in client tool.
- Update: Added ability to update the registered token password/pin for PKCS11 library certificates.
- Update: Added eye to all password fields.
- Update: Improved the port available check in the installer and added "I know what I'm doing" checkbox to bypass port validation.
- Update: Improvements to session locking and cache handling when signing using PKCS11 libraries.
- Update: Error handling improvements.
- Update: Some minor UI improvements.
- Updates to some third party packages.
v1.0.0.329
December 4th, 2024
Initial Release
Note that if you had the RC or earlier beta build installed, you will need to uninstall and re-install to fix an installer issue - contact support before doing this (we are contacting beta testers and RC customers).
v1.0.0.319 Beta
November 18th, 2024
RC 1