digitronicnet / keepass-tokenengine-plugin

Implementation of the KeyProvider interface to use the Token Engine as key source.
https://www.digitronic.net/keepass-plugin-fuer-smartlogon
GNU General Public License v3.0
5 stars 1 forks source link

Invalid library digital signature #2

Open imtoao opened 2 years ago

imtoao commented 2 years ago

Hello, The certificate used to sign all three libraries expired on December, 2021 so Keepass won't load the plugin. This is a big problem because even if the certificate is renewed and files resigned, the plugin will only work for 2 or 3 years (Standard certificate duration) and then the exact same thing will happen. The main question is will I still be able to access it if the certificate is not renewed? Since Keepass is not even loading the pluggin now, the answer is probably no. Any information/clarification would be appreciated. Regards

digitronic-info commented 2 years ago

Hello,

the plugin, which you can download from our homepage, is loaded correctly by the current KeePass version. The signature is a valid Authenticode signature performed with an Extended Validation certificate and signed timestamp, which means the signature does not expire.

If the plugin is not loaded for you, please check whether you have followed the instructions for setting up the plugin correctly.

Kind regards