Is the Verisign Timestamp server down?

Inno SetupCode SigningVerisign

Inno Setup Problem Overview


I was trying to build my setup scripts with Inno Setup these past two days (1 & 2 Jan 2021) and the digital signing was failing. So I contacted Verisign via email and await their response.

Inno Setup Solutions


Solution 1 - Inno Setup

I received an official response from Verisign this afternoon (on 2 Jan 2021):

> Thank you for contacting Verisign Support. > > This server was deprecated after our authentication services were sold > to Symantec, which is now Digicert. You can find a list of free > timestamp servers online or theirs is now at > http://timestamp.digicert.com. > > If you have additional questions, please do not hesitate to contact > us.

So the http://timestamp.verisign.com timestamp server is no more.

At the moment I know of the following alternatives (in addition to Digicert above) which work well:

  • http://timestamp.comodoca.com/authenticode
  • http://timestamp.globalsign.com/scripts/timestamp.dll
  • http://tsa.starfieldtech.com

Solution 2 - Inno Setup

When using Microsoft's SignTool.exe

Change the timestamping server (-t):

  • Before: signcode -t "http://timestamp.verisign.com/scripts/timstamp.dll" (defunct)

  • After:    signcode -t "http://timestamp.digicert.com"

Attributions

All content for this solution is sourced from the original question on Stackoverflow.

The content on this page is licensed under the Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) license.

Content TypeOriginal AuthorOriginal Content on Stackoverflow
QuestionAndrew TruckleView Question on Stackoverflow
Solution 1 - Inno SetupAndrew TruckleView Answer on Stackoverflow
Solution 2 - Inno SetupIan BoydView Answer on Stackoverflow