[SignServer-announce] SignServer 3.5.2 released

[Markus K. <ma...@pr...>]

We are pleased to announce the release of SignServer 3.5.0.

This release resolves several minor issues and brings improved
performance in some areas as well as adds some new features such as
SHA-2 support in the PDF signer.


This is a maintenance release with 17 issues resolved, the most
noteworthy of which are:

New features and improvements:
 - Support for SHA-2 hash algorithms in PDF Signer.
 - Support for using the worker servlet when running the stress test tool.
 - Checksums using SHA256 are now available for the releases.
 - System tests are now included in the binary distribution.

Bug fixes:
 - PDF and XAdES signers could cause deadlocks under high load when
using a local TSA.
 - Ant target for copying modules was not working for custom sub modules.
 - Updated Apache Santuario (XML Security) for a security and a
performance issue.

The security issue might open up the server for a possible denial of
service attack if the XML Validator is configured and exposed on a
public network. Users running the XML Validator are recommended to
upgrade to SignServer 3.5.2 and to see the included release notes for
further details.

Read the full changelog for details
(https://jira.primekey.se/browse/DSS?report=com.atlassian.jira.plugin.system.project:changelog-panel#selectedTab=com.atlassian.jira.plugin.system.project%3Achangelog-panel).


Regards,
PrimeKey SignServer Team