SignServer 5.4 Release Notes

The PrimeKey SignServer team is pleased to announce the release of SignServer 5.4.

With this release, we have implemented a new Azure Key Vault Crypto Token as well as a JSON Web Token (JWT) Authorizer.

This release also brings support for keeping SignServer configurations and custom modifications in an external directory, shared between versions.

Highlights

Azure Key Vault Support

We have implemented a new Crypto Token that allows you to store and use the signing keys in Azure Key Vault. This Azure Key Vault Crypto Token can thus be used as an alternative to using a Hardware Security Module (HSM) or a software keystore. For more information, see AzureKeyVaultCryptoToken.

JSON Web Token Authorizer

A new Authorizer implementation makes it possible to allow signature requests based on the provided JSON Web Token (JWT) included in the request. This allows having an identity provider separate from the SignServer application. Such an identity provider (or authorization server) can potentially offer support for standards like OpenID Connect or OAuth 2.0 etcetera and user directories such as LDAP and Active Directory. For more information, see JWT Authorizer.

Custom Folder for Configuration

To ease upgrades and allow keeping your configurations from a version to another, you can now store your SignServer configurations in a signserver-custom folder outside of the SignServer home directory.

Your configuration files placed in the signserver-custom folder will override the corresponding files found in the SIGNSERVER_HOME directory. Thus, when upgrading SignServer, you can then replace the SignServer folder without having to manually copy old configurations. For more information, see Custom Configuration Outside of Installation Directory in Install SignServer. 

Upgrade Information

No database changes are required for this release. Review the SignServer Upgrade Notes for important information on changes and requirements to be aware of when upgrading SignServer. For upgrade instructions, see Upgrade SignServer.

Change Log: Resolved Issues

For full details of fixed bugs and implemented features in SignServer 5.4.0, refer to our JIRA Issue Tracker.

Issues Resolved in 5.4.0