Release note Nexus Timestamp Server 2.3.0

Updated configuration parameters for OCSP validation filters

Updated configurations for RevocationValidationFilter and OcspValidationFilter due to updates to the HTTP client. This means that old configurations may need to be migrated.

See Configure outbound HTTP Proxy for more information.

Support for Microsoft Authenticode signatures

Nexus Timestamp Server now supports Microsoft Authenticode time stamping. Authenticode signatures provide authorship and integrity guarantees for binary data, for example: .exe and .ps1. To enable this feature, see service.properties.

For more information, see Configure Authenticode Timestamp and https://learn.microsoft.com/en-us/windows/win32/seccrypto/time-stamping-authenticode-signatures.

Support for multiple digest algorithms

Nexus Timestamp Server now supports multiple digest algorithms coming from the client request. To activate this feature, add digest algorithms in the MessageImprint filter, separated by commas.

Example configuration:
digestalgorithm=SHA-256,SHA-512

Log incoming IP address

The IP address of the incoming request can now be logged. See <ipaddress> under Logging in Nexus Timestamp Server.

Java 17 support

Nexus Timestamp Server now supports Oracle and OpenJDK Java 17.

Removed Derby support

It is no longer possible to use Derby as database of choice for Nexus Timestamp Server.

Removed Java 11 support

Nexus Timestamp Server no longer supports Java 11.