23.6.0

As part of our ongoing commitment to deliver the best remote signing solutions, we are announcing a change in our product offerings.

We have decided to deprecate our EthSigner product to focus our efforts on enhancing Web3Signer, our newly comprehensive remote signing solution. This is rooted in our strategy to streamline our offerings and focus on a single, robust product that will provide functionality for both transaction and Ethereum validator signing. We hope this makes it applicable to all your use-cases like public Ethereum signing, staking infrastructure offerings, and in private network contexts.

Rest assured, we are not dropping existing EthSigner functionality. We are updating Web3Signer to incorporate the functionalities of EthSigner alongside everything else in Web3Signer. We will ensure a smooth transition by maintaining EthSigner with necessary patches for an additional six months. We hope this provides ample time for any necessary migration to Web3Signer.

Bugs Fixed

• Update of Azure libraries (transitive via signers library) and manual override to fix CVE-2023-1370
• Updated various dependent libraries versions

Full Changelog: 23.2.0...23.6.0

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:23.6.0

23.2.0

Features Added

• Introduced proxy cli options to connect to downstream client - by @germinalo in #475

Bugs Fixed

• Various library dependencies updates, including Vertx to 4.3.8
• Docker image - manually install libssl3 to bring in latest version
• Docker image - fix directory permissions by @mfolnovic in #465

Full Changelog: 22.1.3...23.2.0

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:23.2.0

22.1.3

Breaking Changes

• Updated Metrics service default port from 8546 to 9546.

Features Added

• Updated various dependent libraries versions

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:22.1.3

22.1.0

22.1.0

Features Added

• Updated Tuweni dependency to version 2.1.0 #432
• Updated Besu dependency to version 22.1.0 #436

Full Changelog: 21.10.9...master

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:22.1.0

21.10.9

21.10.9

Breaking Changes

• Update EthSigner docker image user to use ethsigner instead of root. It may result in backward compatibility/permission issues with existing directory mounts.

Bugs Fixed

• Update Vertx to 4.x and various other dependencies to their latest versions. #415

Full Changelog: 21.10.4...21.10.9

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:21.10.9

21.10.4

21.10.4

Bugs Fixed

• Updated to log4j 2.17.1. Resolves two potential vulnerabilities which are only exploitable when using custom log4j configurations that are either writable by untrusted users or log data from the ThreadContext.

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:21.10.4

21.10.3

Bugs Fixed

• Updated log4j to 2.17.0

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:21.10.3

21.10.2

Bugs Fixed

• Updated log4j to 2.16.0 to mitigate JNDI attack via thread context.

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:21.10.2

21.10.1

Bugs Fixed

• Updated log4j and explicitly disabled format message lookups.

---

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:21.10.1

21.10.0

21.10.0

Breaking Changes

• Azure vault remote signing keys created with deprecated SECP256K1 curve name are not supported anymore. Such keys would need to be regenerated and/or re-imported with Key type: EC and curve name: P-256K. #386

Bugs Fixed

• Adding configuration files should load new accounts automatically without restarting EthSigner #390
• eth_sign signing of hex data #393
• Upgrade web3j to latest version for fix to handle large chainids in eip155 transactions #382

Features Added

• Add validation for GoQuorum transactions with value #377
• Add publishing to docker namespace "consensys/ethsigner" and deprecate docker namespace "consensys/quorum-ethsigner" #384
• Upgrade to signers 1.0.19 allows empty password files to be read when creating a Signer #372
• Upgrade besu to 21.10.0 for acceptance tests

Download links

• tar.gzip
• zip

Docker

• docker pull consensys/ethsigner:21.10.0