SignServer / News: Recent posts

SignServer Community 7.3.12 is released

We are pleased to announce the release of SignServer Community 7.3.2.

Release highlights include:

• REST API Extensions
• Bouncy Castle Upgrade
• WildFly 35 Support

Resolved Security Issues

• CVE-2025-47220: File enumeration
• CVE-2025-47221: File writing
• CVE-2025-47222: Class name enumeration

For more information:

Read the full SignServer Community 7.3.2 Release Notes.... read more

SignServer Community 7.1.1 is released

We are pleased to announce the release of SignServer Community 7.1.1.

Release highlights include:

• NIST Approved Quantum-Safe Algorithms ML-DSA and SLH-DSA
• Bouncy Castle Upgrade

For more information:

Read the full SignServer Community 7.1 Release Notes

Visit the SignServer project on signserver.org

SignServer Community 7.0 is released

We are pleased to announce the release of SignServer Community 7.0.

Release highlights include:

• Upgraded technology stack

For more information:

Read the full SignServer Community 7.0 Release Notes

Visit the SignServer project on signserver.org

Release highlights include:

• REST API Extensions
• Microsoft SQL Server database support
• Documentation on Keyfactor Docs
  • As of SignServer 6.3, the SignServer product documentation is available at docs.keyfactor.com
• Bouncy Castle upgraded to 1.78

For more information:

Read the full [SignServer Community 6.3 Release Notes(https://docs.keyfactor.com/signserver/latest/signserver-community-6-3-release-notes)... read more

We are pleased to announce the release of SignServer Community 6.2.

**Release highlights include: **

REST API for managing workers

**For more information: **

Read the full SignServer Community 6.2 Release Notes

Visit the SignServer project on signserver.org

We are pleased to announce the release of SignServer Community 6.0.

**Release highlights include: **

• REST Interface
• Post-Quantum Readiness
• Technology upgrades

**For more information: **

Read the full SignServer Community 6.0 Release Notes

Visit the SignServer project on signserver.org

We are pleased to announce the release of SignServer Community 5.11.1.Final.

**Release highlights include: **

• Debian package signing
• Refreshed UI
• Bouncy Castle upgraded to 1.72

**For more information: **

Read the full SignServer Community 5.11 Release Notes

Visit the SignServer project on signserver.org

Follow us on SignServer Discussions on GitHub for future announcements

We are pleased to announce the release of SignServer Community 5.10.0.Final.

**Release highlights include: **

• Java Archive (JAR) File Signing
• Post-quantum Signing with upgraded SPHINCS+ Algorithm

**For more information: **

Read the full SignServer Community 5.10 Release Notes

Visit the SignServer project on signserver.org

Follow us on SignServer Discussions on GitHub for future announcements

At the Keyfactor Community Tech Meetup in Stockholm on September 7, you will get a chance to meet the SignServer product architect Markus Kilås and product manager Magnus Normark and ask any questions that matter to you and your team.

To be sure to get your topics covered, you are welcome to ask your questions in advance on GitHub: https://github.com/Keyfactor/signserver-ce/discussions/9

Read more and sign up for the Meetup: https://www.keyfactor.com/keyfactor-community-tech-meetup-2022/

From now on, our main discussion forum is on GitHub. Please join us there to share knowledge or ask questions to other developers or the product team: SignServer Discussions on GitHub. The SourceForge mailing lists will be discontinued during 2022.

We also welcome you to sign up for our Newsletter on Keyfactor Community, to stay up to date on the latest news, software updates, hands-on tutorials and user workshops on all our open-source software.

We are pleased to announce the release of SignServer Community 5.9.1.

**Release highlights include: **

• More frequent releases
• Code signing with post-quantum cryptography
• Azure Key Vault support
• DNSSEC support

**For more information **

Read the full SignServer 5.9.1 Release Notes

Visit the SignServer project on signserver.org. ... read more

**The PrimeKey SignServer team is pleased to announce that SignServer is available as a Docker container on Docker Hub, built on the SignServer Community 5.2 release. **

To download SignServer Community Container from Docker Hub, go to https://hub.docker.com/r/primekey/signserver-ce .

To review the SignServer Community 5.2 Release Notes, refer to the news post from when SignServer 5.2.0.Final was released:
https://sourceforge.net/p/signserver/news/2020/01/signserver-520final-released/ .... read more

The PrimeKey SignServer team is pleased to announce the release of SignServer Community 5.2.0.Final.

In total 18 tickets have been resolved since SignServer Enterprise 5.1.0 and 58 tickets since the last community version, highlights mentioned below.

Highlights

New Administration Web

The SignServer Administration GUI (AdminGUI) has been replaced with a brand new Administration Web interface, previously only available in SignServer Enterprise.... read more

The PrimeKey SignServer team is pleased to announce the release of SignServer Community 5.2.0.Beta1.

In total 18 tickets have been resolved since SignServer Enterprise 5.1.0 and 58 tickets since the last community version, highlights mentioned below.

Highlights

New Administration Web

The SignServer Administration GUI (AdminGUI) has been replaced with a brand new Administration Web interface, previously only available in SignServer Enterprise.... read more

The PrimeKey SignServer team is proud to announce the release of SignServer 5.0.0.Final Community edition.

SignServer 5 is the next generation SignServer with 48 issues resolved since SignServer Enterprise 4.4.1 and a total of 415 issues resolved since SignServer Community edition 4.0. From today you will be able to take advantage of the new server failover and load balancing functionality in the SignClient as well as leveraging the client side hashing feature for CMS/PKCS#7 detached signatures. In addition, with SignServer 5 we have done a major technology upgrade. Some more noteworthy updates are listed below:... read more

The PrimeKey SignServer team is happy to announce the release of SignServer 4.0.0 community and enterprise editions, introducing the next generation SignServer.

SignServer 4.0.0 is the next generation SignServer with 119 issues resolved since SignServer Enterprise 3.7.4 and a total of 198 issues resolved since SignServer Community Edition 3.7.0, some of the most noteworthy listed below:

New Features and Improvements

• Technology upgrade, including:
• Updated to Java EE 6.
• Major internal library updates such as for CESeCore and Bouncy Castle etc.
• Internal API changes.
• Build system changes.
• Support for large files (Enterprise Edition only).
• Support for RFC 5816 time-stamps.
• More reliable calculation of free memory in Health Check.
• Various Administration GUI improvements.... read more

The PrimeKey SignServer team is happy to announce the release of SignServer 3.6.2 community and enterprise editions!

This maintenance release resolves two bugs including one security fix. In total 5 issues were resolved, of which the most noteworthy are:

Bug fixes:

• Security issue in XML workers
• Regression: Menu command for activating workers not working properly in GUI

Improvements:

• TimeMonitor now honours rate limiting messages
• Updated list of 3rd party dependencies and licenses... read more

The PrimeKey SignServer team is happy to announce the release of SignServer 3.6.1 community and enterprise editions!

This maintenance release resolves several minor issues and introduces one new feature. In total 20 issues were resolved, of which the most noteworthy are:

New features and improvements:

• Added detached signature option to CMSSigner (contributed by Pablo Ruiz García)
• Improved documentation on how to specify issuer DN for clients and administrators
• Improved error checking for signer certificate extended key usage at configuration time for TimeStampSigner and MSAuthCodeTimeStampSigner... read more

The PrimeKey SignServer team is happy to announce the release of SignServer 3.6.0 community and enterprise editions!

This release brings exciting new features such as independent worker and crypto token configuration and support for querying the database archive from the GUI.

This is a major release with 25 issues resolved, the most noteworthy of which are:

New features and improvements:

• Independent worker and crypto token configuration
• Querying of database archive from WS and GUI
• Support for specifying HSM slot by label
• HSM keep alive service
• Underlying CESeCore library upgraded
• Separation between community and enterprise editions
• New application: SignServer TimeMonitor (enterprise edition only)

We are pleased to announce the release of SignServer 3.5.2.

This release resolves several minor issues and brings improved performance in some areas as well as adds some new features such as SHA-2 support in the PDF signer.

This is a maintenance release with 17 issues resolved, the most noteworthy of which are:

New features and improvements:

• Support for SHA-2 hash algorithms in PDF Signer.
• Support for using the worker servlet when running the stress test tool.
• Checksums using SHA256 are now available for the releases.
• System tests are now included in the binary distribution.... read more

We are happy to announce that SignServer 3.5.0 has been released!
This is a major release with in total 51 issues resolved. The most noteworthy changes can be seen below.

SignServer 3.5.0 Release Notes:

New features and improvements:

• Support for JBoss AS 7.1, JBoss EAP 6.1 and GlassFish 3.1.
• Support for MariaDB.
• Support for JDK 7.
• All worker configuration can now be done from the Admin GUI.
• Document signer for XAdES-BES and XAdES-T contributed by Luis Maia.
• Document validator for XAdES-BES and XAdES-T.
• Support for different signature algorithms in XML signers.
• Various AdminGUI/remote administration improvements.... read more

The PrimeKey SignServer team are happy to announce that SignServer 3.4.3
has been released!

This is a maintenance release – 2 issues have been resolved. The most noteworthy changes can be seen below.

SignServer 3.4.3 Release Notes:

Bug fixes:

• Regression introduced in 3.4.2: test signatures were not performed as part of the getstatus command or from health check.
• Upgraded a 3rd party Apache library with a security fix.... read more

The PrimeKey SignServer team is happy to announce that SignServer 3.4.2 has been released!

This is a maintenance release with in total 13 tickets resolved. The most noteworthy changes can be seen below.

Development continues beyond this version and all requests from the community are scheduled for SignServer 3.4.3 or later releases. More information is available at the project web site and the complete changelog can be viewed in the issue tracker.... read more

The PrimeKey SignServer team is happy to announce that SignServer 3.4.1
has been released!

This is a maintenance release - in total 19 features, options, bugs and
stabilizations have been fixed or added.

Development continues beyond this version and all requests from the
community are scheduled for SignServer 3.4.2 or later releases.

More information is available at the project web site and the complete
changelog can be viewed in the issue tracker.... read more

The PrimeKey SignServer team is happy to announce that SignServer 3.4.0
has been released!

This is a major release - in total 27 features, options, bugs and
stabilizations have been fixed or added.

Development continues beyond this version and all requests from the
community are scheduled for SignServer 3.4.1 or later releases.

More information is available at the project web site and the complete
changelog can be viewed in the issue tracker.... read more