Can't sign app: The specified timestamp server either could not be reached or returned an invalid response.

• Version: 1.8.4

• Target: Windows 8

Hi I’m using electron-builder to make a .exe and it fails at signing “Zipier Desktop.exe”.

The command its using to sign is:

C:\Users\Mike\AppData\Local\electron-builder\cache\winCodeSign\winCodeSign-2.0.0\windows-10\x64\signtool.exe sign /tr http://timestamp.verisign.com/scripts/timstamp.dll /f build/codesign.pfx /fd sha256 /td sha256 /d Zipier Desktop /du https://github.com/Mike-Wood/zipier-desktop-release-server#readme /as C:\mike\mike_storage\desktop\dist\win-ia32-unpacked\Zipier Desktop.exe

I have a feeling its because it has a space in the name “Zipier Desktop.exe”, it could also be that my certificate does’t have a password but it was working earlier today so I don’t think that would be the reason. I’ve tried using the default rfc3161TimeStampServer but it doesn’t work either. I also tried running the command on its own and got the same error:

SignTool Error: The specified timestamp server either could not be reached or
returned an invalid response.

The full error is:

Error: Exit code: 1. Command failed: C:\Users\Mike\AppData\Local\electron-builder\cache\winCodeSign\winCodeSign-2.0.0\windows-10\x64\signtool.exe sign /tr http://timestamp.verisign.com/scripts/timstamp.dll /f build/codesign.pfx /fd sha256 /td sha256 /d Zipier Desktop /du https://github.com/Mike-Wood/zipier-desktop-release-server#readme /as C:\mike\mike_storage\desktop\dist\win-ia32-unpacked\Zipier Desktop.exe
SignTool Error: The specified timestamp server either could not be reached or
returned an invalid response.
SignTool Error: An error occurred while attempting to sign: C:\mike\mike_storage\desktop\dist\win-ia32-unpacked\Zipier Desktop.exe

Done Adding Additional Store

Number of errors: 1

SignTool Error: The specified timestamp server either could not be reached or
returned an invalid response.
SignTool Error: An error occurred while attempting to sign: C:\mike\mike_storage\desktop\dist\win-ia32-unpacked\Zipier Desktop.exe

Any help would be appreciated. Thanks 😃

[claygriffiths]

I set build.win.rfc3161TimeStampServer in package.json to a different server (http://sha256timestamp.ws.symantec.com/sha256/timestamp) and it worked.

I found the Symantec server in https://gist.github.com/Manouchehri/fd754e402d98430243455713efada710

[laurent22]

The problem is that the default server is “timestamp.comodoca.com/rfc3161” and they say this on the page:

If you are signing several pieces of software with a script, please add a delay of 15 seconds or more between signings so that you’re not hammering our servers.

However electron-builder has much shorter delays. Even when it fails, it says it will retry in 2 seconds - delay needs to be changed to at least 15 seconds.