Verisign 时间戳服务器是否已关闭?

Is the Verisign Timestamp server down?

过去两天(2021 年 1 月 1 日和 2 日)我尝试使用 Inno Setup 构建我的设置脚本,但数字签名失败了。所以我通过电子邮件联系了 Verisign 并等待他们的回复。

我今天下午(2021 年 1 月 2 日)收到了 Verisign 的正式回复:

Thank you for contacting Verisign Support.

This server was deprecated after our authentication services were sold to Symantec, which is now Digicert. You can find a list of free timestamp servers online or theirs is now at http://timestamp.digicert.com.

If you have additional questions, please do not hesitate to contact us.

所以 http://timestamp.verisign.com 时间戳服务器不存在了。

目前我知道以下替代方案(除了上面的 Digicert)效果很好:

  • http://timestamp.comodoca.com/authenticode
  • http://timestamp.globalsign.com/scripts/timestamp.dll
  • http://tsa.starfieldtech.com

使用微软的 SignTool.exe

更改时间戳服务器 (-t):

  • 之前signcode -t "http://timestamp.verisign.com/scripts/timstamp.dll" (已失效)
  • 之后: signcode -t "http://timestamp.digicert.com"