http://timestamp.verisign.com/scripts/timstamp.dll not available

Question

When the following URL is not available, what other timestamp URL can I use in my setup authoring tool? The specific error I get is: SignTool Error: The specified time

Answer 1

http://timestamp.verisign.com/scripts/timstamp.dll has limped along for the last few years and had been working in a sort of depreciated state, but the new owners of the certificate issuing business, DigiCert, have issued a migration alert.

They have officially put the old services to EOL as of the back end of 2019.

(article no no longer exists 18/11/2020) https://knowledge.digicert.com/alerts/migration-of-legacy-verisign-and-symantec-time-stamping-services.html

New services can be found at

http://timestamp.digicert.com?alg=sha1

http://timestamp.digicert.com?alg=sha256

Troubleshooting time stamping

Answer 2

Try these servers

http://tsa.starfieldtech.com
http://timestamp.globalsign.com/scripts/timstamp.dll
http://timestamp.comodoca.com/authenticode
http://www.startssl.com/timestamp
http://timestamp.verisign.com/scripts/timstamp.dll

With a retry script such as the one included here: Alternative timestamping services for Authenticode

Answer 3

For jarsigner users:

As of 4/24/2017, Verisign knowledge base article AR185 recommends the jarsigner arguments "-tsa http://sha256timestamp.ws.symantec.com/sha256/timestamp". This works for certificates issued by Symantec, and presumably all of Symantec's subsidiaries, at least. http://timestamp.verisign.com/scripts/timstamp.dll does not work.

Answer 4

Honestly, I would just try again. But you can use any of the following:

• http://timestamp.globalsign.com/scripts/timstamp.dll,
• http://timestamp.comodoca.com/authenticode, or
• http://www.startssl.com/timestamp.