Signo

5.6easy start · #25 of 26
in Code Signing Software

Runs on api, Linux, self-hosted.

Signo is ranked #25 of 26 in code signing software on The Geeks Club. It runs on API, Linux, Self-hosted.

Compared on code signing software

SignServer 0 of 4 in the starter kit Lesson 17.9 SignPath 0 of 4 in the starter kit Lesson 27.3 AWS Signer 0 of 4 in the starter kit Lesson 37.2 Cosign 0 of 4 in the starter kit Lesson 47.1 Sigstore 0 of 4 in the starter kit Lesson 57.1 Keyfactor Platform 0 of 4 in the starter kit Lesson 67.0

Purpose: Signo is an open source, self hosted signing service with support for PKCS#11 tokens.
File signing: It signs files through an HTTP API and supports plain signatures and Authenticode signing for Windows executables.
Intended use: The project aims to let CI applications generate signed executables using certificates stored on hardware tokens.
User management: Multiple users can manage tokens, signing engines, and signees.
Token controls: A PKCS#11 token must be activated by manually entering its PIN before it can be used to sign.
API access: API clients, called signees, can be assigned access to individual signing engines, and API requests are HMAC signed.
Databases: The configuration supports either MySQL or SQLite.
Security setup: The setup instructions require configuring an SSL certificate and listing PKCS#11 modules.
Distribution: The project says Signo is available through NPM or Docker Hub, with NPM described as the simplest installation route.
Runtime requirement: The quick start calls for a Linux machine with NodeJS 16 or 18 installed.
License: The repository displays a GPL-3.0 license.
Planned features: The README lists a cryptographically verifiable operations log, PDF signing, key and CSR generation, and certificate import to tokens as planned features.

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.