Signo

Linux · Self-hosted · API

Freedom report

No signalScore 5.1

Signo is ranked #21 of 26 in code signing software on Freedom251. It runs on API, Linux, Self-hosted.

Compared on code signing software

Purpose: Signo is an open source, self hosted signing service with support for PKCS#11 tokens.
File signing: It signs files through an HTTP API and supports plain signatures and Authenticode signing for Windows executables.
Intended use: The project aims to let CI applications generate signed executables using certificates stored on hardware tokens.
User management: Multiple users can manage tokens, signing engines, and signees.
Token controls: A PKCS#11 token must be activated by manually entering its PIN before it can be used to sign.
API access: API clients, called signees, can be assigned access to individual signing engines, and API requests are HMAC signed.
Databases: The configuration supports either MySQL or SQLite.
Security setup: The setup instructions require configuring an SSL certificate and listing PKCS#11 modules.
Distribution: The project says Signo is available through NPM or Docker Hub, with NPM described as the simplest installation route.
Runtime requirement: The quick start calls for a Linux machine with NodeJS 16 or 18 installed.
License: The repository displays a GPL-3.0 license.
Planned features: The README lists a cryptographically verifiable operations log, PDF signing, key and CSR generation, and certificate import to tokens as planned features.

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.