Signotaur v1.2.0.161

Released: Jun 11, 2026

v1.2.0.161 での更新項目

機能

  • Detached CMS signing is now supported for archive and disk-image formats (.zip, .7z, .tar, .gz, .tgz, .bz2, .xz, .iso, .img, .vhd, .vhdx) via the new --detached and --signature-file <Pattern> options.
  • CMS and RDP signing now support ECDSA code-signing certificates in addition to RSA.
  • Unsupported file types that are detected to be valid PE images are now automatically signed with Authenticode, including staged .tmp binaries produced by build tools such as InstallShield.
  • The server now translates low-level cryptographic provider errors (CSP/CNG/KSP) into clear, actionable messages when signing or loading certificates, instead of surfacing raw error codes.
  • PKCS#11 signing now verifies each signature before returning it and automatically retries transient token errors, improving reliability with hardware tokens and HSMs.
  • The message shown when an unsupported certificate type is used for signing is now clearer.
  • The client now returns more specific exit codes for a wider range of failures — including Win32 file errors, additional CMS/cryptographic errors, and AppX/MSIX packaging errors — and previously unmapped errors now map to dedicated codes rather than a generic failure.

不具合の修正

  • Fixed misleading authentication error messages during first-user setup and two-factor login, and hardened client-side parsing of server error responses.
  • Fixed intermittent ECDSA signature verification failures caused by an ASN.1 integer-encoding error.
  • Fixed a PKCS#11 locking issue where signing and certificate-lookup operations on the same token were not serialized, which could cause spurious "user already logged in" errors.
  • The SMTP password is no longer cleared when email settings are saved without entering a new password.
  • The user-account popup in the store-certificate registration dialog now closes only when its buttons are clicked, rather than on any outside click.
  • The Display Name field is now correctly optional during external-login setup, with its form label linked correctly.
  • Infrastructure:
    • Updated the .NET SDK to v10.0.301.
    • Third-party package updates.