Releases: smallstep/certificates
Step CA v0.28.3 (25-03-18)
Official Release Artifacts
Linux
- 📦 step-ca_linux_0.28.3_amd64.tar.gz
- 📦 step-ca_0.28.3-1_amd64.deb
- 📦 step-ca-0.28.3-1.x86_64.rpm
- 📦 step-ca_0.28.3-1_arm64.deb
- 📦 step-ca-0.28.3-1.aarch64.rpm
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.28.3_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.28.3_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.28.3_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
Thanks!
Those were the changes on v0.28.3!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.
Step CA v0.28.3-rc1 (25-03-18)
Official Release Artifacts
Linux
- 📦 step-ca_linux_0.28.3-rc1_amd64.tar.gz
- 📦 step-ca_0.28.3.rc1-1_amd64.deb
- 📦 step-ca-0.28.3.rc1-1.x86_64.rpm
- 📦 step-ca_0.28.3.rc1-1_arm64.deb
- 📦 step-ca-0.28.3.rc1-1.aarch64.rpm
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.28.3-rc1_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.28.3-rc1_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.28.3-rc1_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
- dfdb779 Changelog for v0.28.3 (#2215)
- d17e2c5 Merge pull request #2214 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.6.0
- 4865fdb Bump github.com/ccoveille/go-safecast from 1.5.0 to 1.6.0
- ac9048d Merge pull request #2212 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.4
- 450a350 Bump cloud.google.com/go/security from 1.18.3 to 1.18.4
- 7afff07 Merge pull request #2213 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.13.0
- fa6fd96 Merge pull request #2210 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.6
- 67aaded Bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0
- 9b7e611 Bump cloud.google.com/go/longrunning from 0.6.5 to 0.6.6
- 6ce27d3 Merge pull request #2205 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
- e26f891 Bump golang.org/x/net from 0.35.0 to 0.37.0
- 0cae1f7 Merge pull request #2202 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
- 8e5db6a Merge pull request #2203 from smallstep/dependabot/go_modules/google.golang.org/api-0.224.0
- 02197ad Bump go.step.sm/crypto from 0.59.0 to 0.59.1
- c3f6a17 Bump google.golang.org/api from 0.223.0 to 0.224.0
- ed2c62d Merge pull request #2204 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.21.1
- 4d44e8c Merge pull request #2206 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.5
- 0644a50 Bump cloud.google.com/go/longrunning from 0.6.4 to 0.6.5
- 32178ed Bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1
- 9b241ec Merge pull request #2196 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
- f289a00 Bump go.step.sm/crypto from 0.58.0 to 0.59.0
- e782f36 Merge pull request #2197 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.35.0
- b3c3d89 Bump golang.org/x/crypto from 0.34.0 to 0.35.0
- bfc8b0c Merge pull request #2195 from smallstep/dependabot/go_modules/google.golang.org/api-0.223.0
- 69eca5c Merge pull request #2194 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
- 7ae7157 Merge pull request #2198 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.37.0
- cfc43f8 Bump github.com/newrelic/go-agent/v3 from 3.36.0 to 3.37.0
- ad635f9 Bump google.golang.org/api from 0.222.0 to 0.223.0
- 4523a13 Bump github.com/smallstep/cli-utils from 0.11.0 to 0.12.1
- 1ef0e4b Merge pull request #2192 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
- 3f840bd Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
- b5d7f59 Merge pull request #2190 from smallstep/herman/fix-cast-test-32bit
- 8609012 Fix
cast
package tests onlinux/arm32
- 7efdfe5 Merge pull request #2189 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
- c22889d Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
- b02df4f Merge pull request #2188 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.11.0
- c3f701f Merge pull request #2184 from smallstep/dependabot/go_modules/google.golang.org/api-0.222.0
- e9dbc98 Bump github.com/smallstep/cli-utils from 0.10.0 to 0.11.0
- 8b6b973 Bump google.golang.org/api from 0.221.0 to 0.222.0
- 37ee518 Merge pull request #2187 from smallstep/herman/fix-ci
- 3c4af2e Use Go 1.23.6 and run
go mod tidy
- 87fe3c1 Bump golang.org/x/crypto from 0.33.0 to 0.34.0
- b077a19 Merge pull request #2183 from smallstep/dependabot/go_modules/github.com/google/go-cmp-0.7.0
- 0979b30 Merge pull request #2182 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.21.0
- 1f43c3d Merge pull request #2186 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
- f30913c Bump go.step.sm/crypto from 0.57.1 to 0.58.0
- 64bfbfd Bump github.com/google/go-cmp from 0.6.0 to 0.7.0
- aec4c80 Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0
Thanks!
Those were the changes on v0.28.3-rc1!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.
Step CA v0.28.2 (25-02-21)
Official Release Artifacts
Linux
- 📦 step-ca_linux_0.28.2_amd64.tar.gz
- 📦 step-ca_0.28.2-1_amd64.deb
- 📦 step-ca-0.28.2-1.x86_64.rpm
- 📦 step-ca_0.28.2-1_arm64.deb
- 📦 step-ca-0.28.2-1.aarch64.rpm
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.28.2_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.28.2_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.28.2_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
- d21e756 Add changelog for v0.28.2 (#2178)
- d4960a1 Merge pull request #2179 from smallstep/carl/linked-ca-init
- 3e4393e Update copy for linked CA init
- b22e186 Merge pull request #2171 from smallstep/dependabot/go_modules/github.com/smallstep/pkcs7-0.2.1
- 8debf5b Bump github.com/smallstep/pkcs7 from 0.1.1 to 0.2.1
- 8610bf6 Merge pull request #2175 from smallstep/dependabot/go_modules/google.golang.org/api-0.221.0
- f59221b Bump google.golang.org/api from 0.220.0 to 0.221.0
- 3d94255 Merge pull request #2172 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.9.0
- 0ce1ecd Bump github.com/hashicorp/vault/api/auth/aws from 0.8.0 to 0.9.0
- 497cb20 Merge pull request #2174 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.9.0
- 9e717d7 Bump github.com/hashicorp/vault/api/auth/approle from 0.8.0 to 0.9.0
- 3db57f7 Merge pull request #2173 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.9.0
- ed2c5ca Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.8.0 to 0.9.0
- e38dec9 Merge pull request #2167 from smallstep/herman/upgrade-linter
- 27944b4 Fix linter issues
- 86c04f0 Merge pull request #2166 from smallstep/dependabot/go_modules/google.golang.org/api-0.220.0
- e236934 Bump to Go v1.22.12
- dca1c6b Bump google.golang.org/api from 0.219.0 to 0.220.0
- 726e0dc Merge pull request #2164 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.1
- d48c5a1 Merge pull request #2165 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.5
- e0ffc47 Merge pull request #2163 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.33.0
- b3f7349 Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
- 791e2af Bump github.com/go-chi/chi/v5 from 5.2.0 to 5.2.1
- 52a4a1b Bump golang.org/x/crypto from 0.32.0 to 0.33.0
- 3159a74 Merge pull request #2153 from smallstep/dependabot/go_modules/google.golang.org/api-0.219.0
- 1f78066 Merge pull request #2154 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
- 14b6f61 Bump go.step.sm/crypto from 0.57.0 to 0.57.1
- 9dabb19 Bump google.golang.org/api from 0.218.0 to 0.219.0
- cf1ef2a Merge pull request #2151 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
- f879d10 Bump github.com/golang/glog from 1.2.3 to 1.2.4
- 4ff06cf Merge pull request #2149 from smallstep/dependabot/go_modules/google.golang.org/api-0.218.0
- b4cddb4 Bump google.golang.org/api from 0.217.0 to 0.218.0
- 1df134e Merge pull request #2147 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.4
- c70a072 Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
- 58dca0f Merge pull request #2148 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
- b0c0344 Bump google.golang.org/grpc from 1.69.4 to 1.70.0
- 93cd8fc Merge pull request #2141 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
- 6b1a82d Merge pull request #2144 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.36.0
- 775071a Merge pull request #2142 from smallstep/dependabot/go_modules/google.golang.org/api-0.217.0
- 54ea865 Bump google.golang.org/api from 0.216.0 to 0.217.0
- 565cab2 Merge pull request #2143 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.3
- 78979c6 Bump github.com/newrelic/go-agent/v3 from 3.35.1 to 3.36.0
- 9d90fb8 Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
- a291fee Bump go.step.sm/crypto from 0.56.0 to 0.57.0
- a729f1f Merge pull request #2140 from smallstep/herman/fix-download-urls
- d1cfae0 Fix download URLs that were pointing to
cli
- 41820c8 Merge pull request #2138 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
- e76ae73 Bump google.golang.org/grpc from 1.69.2 to 1.69.4
- c5a0249 Merge pull request #2137 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.2
- 97d1692 Merge pull request #2136 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
- a7f7a15 Bump golang.org/x/net from 0.33.0 to 0.34.0
- 7a180e4 Bump google.golang.org/protobuf from 1.36.1 to 1.36.2
- b1195f2 Merge pull request #2135 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
- 57b0378 Merge pull request #2139 from smallstep/dependabot/go_modules/google.golang.org/api-0.216.0
- 6283fe6 Bump google.golang.org/api from 0.214.0 to 0.216.0
- 9f50dd9 Bump softprops/action-gh-release from 2.2.0 to 2.2.1
- 47c08d5 Merge pull request #2131 from smallstep/herman/unflake-request-id-integration-test
- b3fb927 Add comment to
requireCAServerToBeAvailable
- c2a6b5b Wait till a connection to the CA host/port can be made
- cda0eec Merge pull request #2129 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.3
- 6796e4f Bump cloud.google.com/go/security from 1.18.2 to 1.18.3
- 98ddef5 Merge pull request #2127 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.12.0
- 1d965aa Merge pull request #2130 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.32.0
- f7cd3ba Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0
- 2dd29b1 Merge pull request #2128 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.4
- 1ecf556 Bump golang.org/x/crypto from 0.31.0 to 0.32.0
- 164f9a9 Bump cloud.google.com/go/longrunning from 0.6.3 to 0.6.4
- e57a3ca Merge pull request #2126 from smallstep/herman/upgrade-linkedca-v0.23.0
- f473632 Use
github.com/smallstep/linkedca
@v0.23.0
- ...
Step CA v0.28.1 (24-11-20)
Official Release Artifacts
Linux
- 📦 step-ca_linux_0.28.1_amd64.tar.gz
- 📦 step-ca_0.28.1-1_amd64.deb
- 📦 step-ca-0.28.1-1.x86_64.rpm
- 📦 step-ca_0.28.1-1_arm64.deb
- 📦 step-ca-0.28.1-1.aarch64.rpm
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.28.1_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.28.1_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.28.1_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
- d327203 Add a few PRs to the 0.28.1 changelog (#2079)
- f5b45d8 Changelog for 0.28.1 (#2078)
- f88a136 Merge pull request #2076 from smallstep/jdoss/repos
- 354af7f Merge branch 'master' into jdoss/repos
- c0d41d7 Add p11-kit package.
- cd57b50 Add in PKCS11 packages.
- 7c9e3ff Merge pull request #2077 from smallstep/jdoss/HSM_container_packages
- ae54b5a Add p11-kit package.
- e63b649 Make script +x.
- 0851563 Add in PKCS11 packages.
- 330b28f Merge branch 'master' into jdoss/repos
- b1c3d18 Merge pull request #2072 from smallstep/dependabot/go_modules/google.golang.org/api-0.206.0
- e0196e4 Bump google.golang.org/api from 0.205.0 to 0.206.0
- 61af4c3 Merge pull request #2074 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.2
- 2847fbd Merge pull request #2073 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.2
- b9296c1 Merge pull request #2075 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.14.0
- 2b4894a Configure GitHub Actions to publish RPMs and Debs to packages.smallstep.com.
- a0048b4 Bump github.com/googleapis/gax-go/v2 from 2.13.0 to 2.14.0
- e9a1a7b Bump google.golang.org/protobuf from 1.35.1 to 1.35.2
- 35bc30b Bump go.step.sm/crypto from 0.54.0 to 0.54.2
- 707f537 Merge pull request #2071 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.1.0
- fc007df Bump softprops/action-gh-release from 2.0.9 to 2.1.0
- 7eccbc5 Merge pull request #2069 from smallstep/mariano/urn
- 1a2e647 Change URN for acme errors
- 73f97e2 Ignore non-constant format string linting error (#2068)
- fdaa665 Merge pull request #2066 from smallstep/mariano/webhook-errors
- 05295d9 Propagate human errors from webhooks
- 2f7690c Merge pull request #2065 from smallstep/mariano/challenge-webhook
- ff37bf1 Add unit tests for scepchallenge webhooks
- f2663dd Add data support on SCEPCHALLENGE webhooks
- 295892e Merge pull request #2060 from smallstep/dependabot/go_modules/google.golang.org/api-0.205.0
- 15e9041 Bump google.golang.org/api from 0.204.0 to 0.205.0
- 8465db8 Merge pull request #2062 from smallstep/dependabot/go_modules/golang.org/x/net-0.31.0
- 8313e47 Bump golang.org/x/net from 0.30.0 to 0.31.0
- c4c0d92 Merge pull request #2061 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.29.0
- 6dda3c1 Bump golang.org/x/crypto from 0.28.0 to 0.29.0
- e82c228 Merge pull request #2057 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.0.9
- 59deaa5 Merge pull request #2058 from smallstep/dependabot/go_modules/google.golang.org/api-0.204.0
- 1ab27b1 Bump google.golang.org/api from 0.203.0 to 0.204.0
- 0a0dfc0 Bump softprops/action-gh-release from 2.0.8 to 2.0.9
Thanks!
Those were the changes on v0.28.1!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.
Step CA v0.28.1-rc2 (24-11-19)
Official Release Artifacts
Linux
- 📦 step-ca_linux_0.28.1-rc2_amd64.tar.gz
- 📦 step-ca_0.28.1.rc2-1_amd64.deb
- 📦 step-ca-0.28.1.rc2-1.x86_64.rpm
- 📦 step-ca_0.28.1.rc2-1_arm64.deb
- 📦 step-ca-0.28.1.rc2-1.aarch64.rpm
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.28.1-rc2_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.28.1-rc2_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.28.1-rc2_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
- 35c1054 Testing
- e63b649 Make script +x.
- 330b28f Merge branch 'master' into jdoss/repos
- b1c3d18 Merge pull request #2072 from smallstep/dependabot/go_modules/google.golang.org/api-0.206.0
- e0196e4 Bump google.golang.org/api from 0.205.0 to 0.206.0
- 61af4c3 Merge pull request #2074 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.2
- 2847fbd Merge pull request #2073 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.2
- b9296c1 Merge pull request #2075 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.14.0
- 2b4894a Configure GitHub Actions to publish RPMs and Debs to packages.smallstep.com.
- a0048b4 Bump github.com/googleapis/gax-go/v2 from 2.13.0 to 2.14.0
- e9a1a7b Bump google.golang.org/protobuf from 1.35.1 to 1.35.2
- 35bc30b Bump go.step.sm/crypto from 0.54.0 to 0.54.2
- 707f537 Merge pull request #2071 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.1.0
- fc007df Bump softprops/action-gh-release from 2.0.9 to 2.1.0
- 7eccbc5 Merge pull request #2069 from smallstep/mariano/urn
- 1a2e647 Change URN for acme errors
- 73f97e2 Ignore non-constant format string linting error (#2068)
- fdaa665 Merge pull request #2066 from smallstep/mariano/webhook-errors
- 05295d9 Propagate human errors from webhooks
- 2f7690c Merge pull request #2065 from smallstep/mariano/challenge-webhook
- ff37bf1 Add unit tests for scepchallenge webhooks
- f2663dd Add data support on SCEPCHALLENGE webhooks
- 295892e Merge pull request #2060 from smallstep/dependabot/go_modules/google.golang.org/api-0.205.0
- 15e9041 Bump google.golang.org/api from 0.204.0 to 0.205.0
- 8465db8 Merge pull request #2062 from smallstep/dependabot/go_modules/golang.org/x/net-0.31.0
- 8313e47 Bump golang.org/x/net from 0.30.0 to 0.31.0
- c4c0d92 Merge pull request #2061 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.29.0
- 6dda3c1 Bump golang.org/x/crypto from 0.28.0 to 0.29.0
- e82c228 Merge pull request #2057 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.0.9
- 59deaa5 Merge pull request #2058 from smallstep/dependabot/go_modules/google.golang.org/api-0.204.0
- 1ab27b1 Bump google.golang.org/api from 0.203.0 to 0.204.0
- 0a0dfc0 Bump softprops/action-gh-release from 2.0.8 to 2.0.9
Thanks!
Those were the changes on v0.28.1-rc2!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.
Release v0.28.1-rc1
Testing
Step CA v0.28.0 (24-10-30)
Official Release Artifacts
Linux
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.28.0_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.28.0_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.28.0_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
- df13aae Update changelog for v0.28.0 (#2051)
- 77667e7 Merge pull request #2049 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.2
- 5147c60 Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
- efd324d Merge pull request #2048 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.2
- a51f670 Merge pull request #2047 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.1
- 9943bf1 Merge pull request #2050 from smallstep/dependabot/go_modules/google.golang.org/api-0.203.0
- bb8605c Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner (#2045)
- 95a6cad Bump google.golang.org/api from 0.201.0 to 0.203.0
- 99baf67 Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
- bfe436b Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
- 34ba7a2 Merge pull request #2046 from smallstep/herman/refactor-cli-utils-import
- b45b73f Use
github.com/smallstep/cli-utils
instead ofgo.step.sm/cli-utils
- 88443dd Use dnsNamesSubsetValidator for IID provisioners (#2044)
- 946bba2 Merge pull request #2040 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.5
- 61fb5f4 Merge pull request #2039 from smallstep/dependabot/go_modules/google.golang.org/api-0.201.0
- 5afe6b1 Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
- 6ce8f7d Bump google.golang.org/api from 0.200.0 to 0.201.0
Thanks!
Those were the changes on v0.28.0!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.
Step CA v0.27.5 (24-10-17)
Official Release Artifacts
Linux
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.27.5_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.27.5_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.27.5_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
- 8d0b4d7 Update changelog for 0.27.5 (#2035)
- d4f96b5 Merge pull request #2032 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.16
- 89a4708 Bump github.com/urfave/cli from 1.22.15 to 1.22.16
- 3aa8627 Merge pull request #2031 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.0
- 3e2be3e Merge pull request #2029 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.0
- 7e4560e Merge pull request #2030 from smallstep/dependabot/go_modules/google.golang.org/api-0.200.0
- 4d59f35 Merge pull request #2034 from smallstep/mariano/http-client
- 6b872e8 Do not fail creating the provisioner HTTP client
- ac93ce8 Bump github.com/newrelic/go-agent/v3 from 3.34.0 to 3.35.0
- 2831a8a Bump google.golang.org/api from 0.199.0 to 0.200.0
- b0acbee Bump go.step.sm/crypto from 0.53.0 to 0.54.0
- 03c4b18 Merge pull request #2020 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.1
- 55b097a Fix protobuf enum field type error message comparison test
- ebcb6a1 Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
- 46b7e12 Merge pull request #2021 from smallstep/dependabot/go_modules/golang.org/x/net-0.30.0
- 43b68da Bump golang.org/x/net from 0.29.0 to 0.30.0
- 01b8a67 Merge pull request #2022 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.28.0
- cd87739 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
- 26b7ca6 Merge pull request #1994 from smallstep/herman/pkcs7-windows-scep-fix
- bd49471 Fix and/or silence linter issues
- 4545659 Fix SCEP Windows client integration test for Go 1.23
- 69486d3 Refactor preparation of test SCEP CAs
- a0dd8d5 Add test case emulating Windows SCEP client
- f1a8d1a Merge pull request #2015 from smallstep/dependabot/go_modules/google.golang.org/api-0.199.0
- a8fa6e0 Bump google.golang.org/api from 0.198.0 to 0.199.0
- b8d5147 Merge pull request #2018 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.67.1
- 442677f Bump google.golang.org/grpc from 1.67.0 to 1.67.1
- a8c2f4d Merge pull request #2017 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.53.0
- 8a7d3cf Bump go.step.sm/crypto from 0.52.0 to 0.53.0
- 45f44e4 Add option for the logging middleware to log real IP (#2002)
- 5909db6 Merge pull request #2009 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.1
- 3520d17 Merge pull request #2007 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.4
- 27b1dd4 Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
- b599056 Bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4
- 2dc75cf Merge pull request #2005 from smallstep/dependabot/go_modules/google.golang.org/api-0.198.0
- ab71b58 Merge pull request #2006 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.1
- 0a8ac03 Merge pull request #2008 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.8.0
- 65aae5d Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.7.0 to 0.8.0
- 964ecd9 Bump cloud.google.com/go/security from 1.18.0 to 1.18.1
- ebe782b Bump google.golang.org/api from 0.197.0 to 0.198.0
- e7841d8 Merge pull request #1998 from smallstep/dependabot/go_modules/google.golang.org/api-0.197.0
- cb6e474 Merge pull request #1999 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.8.0
- dee71eb Bump google.golang.org/api from 0.196.0 to 0.197.0
- 705f90d Merge pull request #1997 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.52.0
- 4b19f81 Bump github.com/hashicorp/vault/api/auth/approle from 0.7.0 to 0.8.0
- bc56c9a Merge pull request #1996 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.8.0
- d7168a6 Merge pull request #2000 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.4
- e9f3bc4 Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
- edba68b Bump go.step.sm/crypto from 0.51.2 to 0.52.0
- 6be2a41 Bump github.com/hashicorp/vault/api/auth/aws from 0.7.0 to 0.8.0
- 35a4d6e Fix typo in legacy X509 certificate parser comment
- f088f92 Fix for failing Windows SCEP enrollment certificates
Thanks!
Those were the changes on v0.27.5!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.
Step CA v0.27.4 (24-09-13)
Official Release Artifacts
Linux
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.27.4_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.27.4_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.27.4_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
Thanks!
Those were the changes on v0.27.4!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.
Step CA v0.27.4-rc1 (24-09-13)
Official Release Artifacts
Linux
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets
section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca
uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign
to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.27.4-rc1_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.27.4-rc1_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.27.4-rc1_amd64.tar.gz
The checksums.txt
file (in the Assets
section below) contains a checksum for every artifact in the release.
Changelog
- 736e1ec [ci] Missing permission in goreleaser job
Thanks!
Those were the changes on v0.27.4-rc1!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.