Skip to content

Commit a2153cf

Browse files
ebourgebourg
committed
Replaced the Comodo timestamping URL with the new Sectigo one
1 parent 5a28b32 commit a2153cf

File tree

12 files changed

+23
-22
lines changed

12 files changed

+23
-22
lines changed

‎README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,7 @@ See https://ebourg.github.io/jsign for more information.
4444

4545
* The Ant task can now sign multiple files by defining a fileset (contributed by Kyle Berezin)
4646
* Fixed the _"Map failed"_ OutOfMemoryError when signing large MSI files
47+
* The default timestamping authority is now Sectigo instead of Comodo
4748

4849
#### Version 4.0 (2021-08-09)
4950

‎docs/index.html

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ <h3 id="ant">Ant Task</h3>
8787
keystore="keystore.jks"
8888
alias="test"
8989
storepass="password"
90-
tsaurl="http://timestamp.comodoca.com/authenticode"/>
90+
tsaurl="http://timestamp.sectigo.com"/>
9191
</pre>
9292

9393
<br>
@@ -196,7 +196,7 @@ <h3 id="ant">Ant Task</h3>
196196
<td valign="top">tsaurl</td>
197197
<td valign="top">
198198
The URL of the timestamping authority, either RFC 3161 or Authenticode services.
199-
You can use for example the COMODO (http://timestamp.comodoca.com/authenticode)
199+
You can use for example the Sectigo (http://timestamp.sectigo.com)
200200
or the Verisign (http://timestamp.verisign.com/scripts/timstamp.dll) services.</td>
201201
<td valign="top" align="center">No</td>
202202
</tr>
@@ -315,7 +315,7 @@ <h3 id="gradle">Gradle plugin</h3>
315315
keystore : 'keystore.p12',
316316
alias : 'test',
317317
storepass : 'secret',
318-
tsaurl : 'http://timestamp.comodoca.com/authenticode')
318+
tsaurl : 'http://timestamp.sectigo.com')
319319
}
320320
}
321321
</pre>
@@ -378,7 +378,7 @@ <h4>Example using a Java keystore:</h4>
378378

379379
<pre>
380380
jsign --keystore keystore.jks --alias test --storepass password \
381-
--tsaurl http://timestamp.comodoca.com/authenticode application.exe
381+
--tsaurl http://timestamp.sectigo.com application.exe
382382
</pre>
383383

384384
<h4>Example using SPC/PVK files:</h4>
@@ -455,7 +455,7 @@ <h3>API</h3>
455455
signer.withProgramName("My Application")
456456
.withProgramURL("http://www.example.com")
457457
.withTimestamping(true)
458-
.withTimestampingAuthority("http://timestamp.comodoca.com/authenticode");
458+
.withTimestampingAuthority("http://timestamp.sectigo.com");
459459

460460
Signable file = Signable.of(new File("application.exe"));
461461
signer.sign(file);

‎jsign-ant/src/test/resources/testbuild.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -144,7 +144,7 @@
144144
keystore="${keystore}"
145145
alias="${alias}"
146146
keypass="${keypass}"
147-
tsaurl="http://timestamp.comodoca.com/authenticode"
147+
tsaurl="http://timestamp.sectigo.com"
148148
tsmode="authenticode"
149149
tsretries="5"
150150
tsretrywait="15"/>
@@ -156,7 +156,7 @@
156156
keystore="${keystore}"
157157
alias="${alias}"
158158
keypass="${keypass}"
159-
tsaurl="http://timestamp.comodoca.com/rfc3161"
159+
tsaurl="http://timestamp.sectigo.com"
160160
tsmode="rfc3161"
161161
tsretries="5"
162162
tsretrywait="15"/>

‎jsign-cli/src/main/java/net/jsign/JsignCLI.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -128,7 +128,7 @@ private void printHelp() {
128128
"Examples:\n\n" +
129129
" Signing with a PKCS#12 keystore and timestamping:\n\n" +
130130
" jsign --keystore keystore.p12 --alias test --storepass pwd \\\n" +
131-
" --tsaurl http://timestamp.comodoca.com/authenticode application.exe\n\n" +
131+
" --tsaurl http://timestamp.sectigo.com application.exe\n\n" +
132132
" Signing with a SPC certificate and a PVK key:\n\n" +
133133
" jsign --certfile certificate.spc --keyfile key.pvk --keypass pwd installer.msi\n\n" +
134134
"Please report suggestions and issues on the GitHub project at https://github.com/ebourg/jsign/issues";

‎jsign-cli/src/test/java/net/jsign/JsignCLITest.java

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -321,7 +321,7 @@ public void testSigningWithYubikey() throws Exception {
321321
public void testTimestampingAuthenticode() throws Exception {
322322
File targetFile2 = new File("target/test-classes/wineyes-timestamped-with-cli-authenticode.exe");
323323
FileUtils.copyFile(sourceFile, targetFile2);
324-
cli.execute("--keystore=target/test-classes/keystores/" + keystore, "--alias=" + alias, "--keypass=" + keypass, "--tsaurl=http://timestamp.comodoca.com/authenticode", "--tsmode=authenticode", "" + targetFile2);
324+
cli.execute("--keystore=target/test-classes/keystores/" + keystore, "--alias=" + alias, "--keypass=" + keypass, "--tsaurl=http://timestamp.sectigo.com", "--tsmode=authenticode", "" + targetFile2);
325325

326326
assertTrue("The file " + targetFile2 + " wasn't changed", SOURCE_FILE_CRC32 != FileUtils.checksumCRC32(targetFile2));
327327

@@ -334,7 +334,7 @@ public void testTimestampingAuthenticode() throws Exception {
334334
public void testTimestampingRFC3161() throws Exception {
335335
File targetFile2 = new File("target/test-classes/wineyes-timestamped-with-cli-rfc3161.exe");
336336
FileUtils.copyFile(sourceFile, targetFile2);
337-
cli.execute("--keystore=target/test-classes/keystores/" + keystore, "--alias=" + alias, "--keypass=" + keypass, "--tsaurl=http://timestamp.comodoca.com/rfc3161", "--tsmode=rfc3161", "" + targetFile2);
337+
cli.execute("--keystore=target/test-classes/keystores/" + keystore, "--alias=" + alias, "--keypass=" + keypass, "--tsaurl=http://timestamp.sectigo.com", "--tsmode=rfc3161", "" + targetFile2);
338338

339339
assertTrue("The file " + targetFile2 + " wasn't changed", SOURCE_FILE_CRC32 != FileUtils.checksumCRC32(targetFile2));
340340

@@ -360,7 +360,7 @@ public HttpFilters filterRequest(HttpRequest originalRequest) {
360360
File targetFile2 = new File("target/test-classes/wineyes-timestamped-with-cli-rfc3161-proxy-unauthenticated.exe");
361361
FileUtils.copyFile(sourceFile, targetFile2);
362362
cli.execute("--keystore=target/test-classes/keystores/" + keystore, "--alias=" + alias, "--keypass=" + keypass,
363-
"--tsaurl=http://timestamp.comodoca.com/rfc3161", "--tsmode=rfc3161", "--tsretries=1", "--tsretrywait=1",
363+
"--tsaurl=http://timestamp.sectigo.com", "--tsmode=rfc3161", "--tsretries=1", "--tsretrywait=1",
364364
"--proxyUrl=localhost:" + proxy.getListenAddress().getPort(),
365365
"" + targetFile2);
366366

@@ -403,7 +403,7 @@ public String getRealm() {
403403
File targetFile2 = new File("target/test-classes/wineyes-timestamped-with-cli-rfc3161-proxy-authenticated.exe");
404404
FileUtils.copyFile(sourceFile, targetFile2);
405405
cli.execute("--keystore=target/test-classes/keystores/" + keystore, "--alias=" + alias, "--keypass=" + keypass,
406-
"--tsaurl=http://timestamp.comodoca.com/rfc3161", "--tsmode=rfc3161", "--tsretries=1", "--tsretrywait=1",
406+
"--tsaurl=http://timestamp.sectigo.com", "--tsmode=rfc3161", "--tsretries=1", "--tsretrywait=1",
407407
"--proxyUrl=http://localhost:" + proxy.getListenAddress().getPort(),
408408
"--proxyUser=jsign",
409409
"--proxyPass=jsign",

‎jsign-core/src/main/java/net/jsign/AuthenticodeSigner.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@
7373

7474
/**
7575
* Sign a file with Authenticode. Timestamping is enabled by default and relies
76-
* on the Comodo server (http://timestamp.comodoca.com/authenticode).
76+
* on the Sectigo server (http://timestamp.sectigo.com).
7777
*
7878
* @author Emmanuel Bourg
7979
* @since 3.0

‎jsign-core/src/main/java/net/jsign/PESigner.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@
3131

3232
/**
3333
* Sign a portable executable file. Timestamping is enabled by default
34-
* and relies on the Comodo server (http://timestamp.comodoca.com/authenticode).
34+
* and relies on the Sectigo server (http://timestamp.sectigo.com).
3535
*
3636
* @see <a href="http://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/Authenticode_PE.docx">Windows Authenticode Portable Executable Signature Format</a>
3737
* @see <a href="http://msdn.microsoft.com/en-us/library/windows/desktop/bb931395%28v=vs.85%29.aspx?ppud=4">Time Stamping Authenticode Signatures</a>

‎jsign-core/src/main/java/net/jsign/timestamp/AuthenticodeTimestamper.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@
4343
public class AuthenticodeTimestamper extends Timestamper {
4444

4545
public AuthenticodeTimestamper() {
46-
setURL("http://timestamp.comodoca.com/authenticode");
46+
setURL("http://timestamp.sectigo.com");
4747
}
4848

4949
protected CMSSignedData timestamp(DigestAlgorithm algo, byte[] encryptedDigest) throws IOException, TimestampingException {

‎jsign-core/src/main/java/net/jsign/timestamp/RFC3161Timestamper.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@
4242
public class RFC3161Timestamper extends Timestamper {
4343

4444
public RFC3161Timestamper() {
45-
setURL("http://timestamp.comodoca.com/rfc3161");
45+
setURL("http://timestamp.sectigo.com");
4646
}
4747

4848
protected CMSSignedData timestamp(DigestAlgorithm algo, byte[] encryptedDigest) throws IOException, TimestampingException {

‎jsign-core/src/test/java/net/jsign/PESignerTest.java

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -475,12 +475,12 @@ public void testInvalidTimestampingURL() throws Exception {
475475

476476
@Test
477477
public void testAuthenticodeTimestampingFailover() throws Exception {
478-
testTimestampingFailover(TimestampingMode.AUTHENTICODE, "http://timestamp.comodoca.com/authenticode");
478+
testTimestampingFailover(TimestampingMode.AUTHENTICODE, "http://timestamp.sectigo.com");
479479
}
480480

481481
@Test
482482
public void testRFC3161TimestampingFailover() throws Exception {
483-
testTimestampingFailover(TimestampingMode.RFC3161, "http://timestamp.comodoca.com/rfc3161");
483+
testTimestampingFailover(TimestampingMode.RFC3161, "http://timestamp.sectigo.com");
484484
}
485485

486486
public void testTimestampingFailover(TimestampingMode mode, String validURL) throws Exception {

‎jsign-gradle-plugin/example.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,6 @@ task sign {
1818
keystore : 'keystore.p12',
1919
alias : 'test',
2020
storepass : 'secret',
21-
tsaurl : 'http://timestamp.comodoca.com/authenticode')
21+
tsaurl : 'http://timestamp.sectigo.com')
2222
}
2323
}

‎jsign/src/deb/data/usr/share/man/man1/jsign.1

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -78,9 +78,9 @@ option is used in combination with the keyfile option.
7878
.TP
7979
.B -t, --tsaurl <URL>
8080
The URL of the timestamping authority, either RFC 3161 or Authenticode services.
81-
You can use the COMODO or the Verisign services:
81+
You can use the Sectigo or the Verisign services:
8282
.br
83-
- http://timestamp.comodoca.com/authenticode
83+
- http://timestamp.sectigo.com
8484
.br
8585
- http://timestamp.verisign.com/scripts/timstamp.dll
8686

@@ -148,7 +148,7 @@ Print the help
148148
Signing with a PKCS#12 keystore and timestamping:
149149

150150
jsign --keystore keystore.p12 --alias test --storepass password \\
151-
--tsaurl http://timestamp.comodoca.com/authenticode application.exe
151+
--tsaurl http://timestamp.sectigo.com application.exe
152152

153153

154154
.TP

0 commit comments

Comments
 (0)