Hi All,
A new version of Signotaur has been released and is available from Signotaur Downloads. The latest stable version of Signotaur is 1.0.0.444.
Changes in v1.0.0.444
- Fix: We were not checking whether a user was locked out, disabled or password was expired when logging in.
- Fix: Temporary password status was not reset after password change, resulting in redirection to change password page.
- Fix: Issue where a user cannot be deleted if it has been assign certificate access.
- Fix: Installer now ensures all parent directories are created to prevent error when copying server SSL certificate.
- Fix: Issues with certificate access dialog boxes on Users and Certificate administration pages not being populated on first open and refreshing after save and reopen.
- Fix: User enabled/disabled status was not updated in database when editing user details.
- Update: Expiration times for temporary passwords, email verification, password reset links, remember me and 2FA remember code can now be specified in the server configuration file. The defaults are 30 minutes for password reset, 12 hours for email verification, one hour for temporary passwords, 14 days for remember me and 30 days for 2FA remember code.
- Update: Now displaying an icon on the users administration page to indicate if a user has been locked out or disabled.
- Update: Added --revocation-mode option to client, for specifying how to check for certificate revocation when building the certificate chain. This can be ‘Online’ to perform live checks (default); ‘Offline’ to skip online checks using cached data. This can significantly improve signing speed when firewall or network issues block CRL/OCSP requests; or ‘NoCheck’ to disable all revocation validation, increasing the risk of accepting revoked certificates.
- Update: Installation is now aborted on unsupported operation systems. Signotaur currently supports Windows 10 / Server 2016 and above.
- Updates to some third party packages.