Official Release Artifacts

Linux

• 📦 step-ca_linux_0.30.1_amd64.tar.gz
• 📦 step-ca_0.30.1-1_amd64.deb
• 📦 step-ca-0.30.1-1.x86_64.rpm
• 📦 step-ca_0.30.1-1_arm64.deb
• 📦 step-ca-0.30.1-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.30.1_amd64.tar.gz
• 📦 step-ca_darwin_0.30.1_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.30.1_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --bundle step-ca_darwin_0.30.1_amd64.tar.gz.sigstore.json \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.30.1_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 10c9392 Changelog update v0.30.1 (#2605)

Thanks!

Those were the changes on v0.30.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.30.0-rc7_amd64.tar.gz
• 📦 step-ca_0.30.0.rc7-1_amd64.deb
• 📦 step-ca-0.30.0.rc7-1.x86_64.rpm
• 📦 step-ca_0.30.0.rc7-1_arm64.deb
• 📦 step-ca-0.30.0.rc7-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.30.0-rc7_amd64.tar.gz
• 📦 step-ca_darwin_0.30.0-rc7_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.30.0-rc7_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --bundle step-ca_darwin_0.30.0-rc7_amd64.tar.gz.sigstore.json \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.30.0-rc7_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• d34619c Update CHANGELOG for 0.30.0 (#2603)
• cfcbe4c Merge pull request #2602 from smallstep/mariano/scep-type-check
• e6da031 Add scep integration tests
• d4103d6 Merge pull request #2511 from savely-krasovsky/master
• 07e4424 Add revocation reason code to CRL | replace deprecated pkix.RevokeCertificate
• 3ce5113 Bump nosql and crypto (#2600)
• 927ecc7 Add actions and security-events permissions to release CI job (#2593)
• c14008e Fix the test for CRL disposition (#2599)
• 10cd5c2 Merge pull request #2537 from filimonic/crl-fix-crl-file-extension
• 6f1a228 Merge pull request #2594 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.18.0
• 386b5b1 Bump github.com/googleapis/gax-go/v2 from 2.17.0 to 2.18.0
• 9785fc8 Merge pull request #2595 from smallstep/dependabot/go_modules/golang.org/x/net-0.52.0
• 843711c Bump golang.org/x/net from 0.51.0 to 0.52.0
• ac828ee Merge pull request #2596 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.49.0
• a25b1d1 Merge pull request #2597 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.6.1
• 62f5368 Bump softprops/action-gh-release from 2.5.0 to 2.6.1
• fd76f00 Bump golang.org/x/crypto from 0.48.0 to 0.49.0
• 24df15d Merge branch 'master' into master
• a73083e Merge branch 'master' into master
• 257c978 Merge branch 'master' into master
• c901e06 Merge branch 'master' into master
• 68435d7 Merge branch 'master' into master
• 455e3e7 crl: crl filename in der format should have .crl extension
• d426123 Merge branch 'master' into master
• f44151d Merge branch 'master' into master
• 0e8bb63 Merge branch 'master' into master
• 27f7d12 Merge branch 'master' into master
• 1dcfaaa feat: remove options and do not set OnlyContainsUserCerts and OnlyContainsCACerts at all
• f1a8a10 Merge branch 'master' into master
• 93b065f feat: add options to configure CRL IDP flags

Thanks!

Those were the changes on v0.30.0-rc7!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.30.0-rc6_amd64.tar.gz
• 📦 step-ca_0.30.0.rc6-1_amd64.deb
• 📦 step-ca-0.30.0.rc6-1.x86_64.rpm
• 📦 step-ca_0.30.0.rc6-1_arm64.deb
• 📦 step-ca-0.30.0.rc6-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.30.0-rc6_amd64.tar.gz
• 📦 step-ca_darwin_0.30.0-rc6_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.30.0-rc6_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --bundle step-ca_darwin_0.30.0-rc6_amd64.tar.gz.sigstore.json \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.30.0-rc6_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 4e8d695 Fix release workflow permissions for CI reusable workflow call
• c14008e Fix the test for CRL disposition (#2599)
• 10cd5c2 Merge pull request #2537 from filimonic/crl-fix-crl-file-extension
• 6f1a228 Merge pull request #2594 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.18.0
• 386b5b1 Bump github.com/googleapis/gax-go/v2 from 2.17.0 to 2.18.0
• 9785fc8 Merge pull request #2595 from smallstep/dependabot/go_modules/golang.org/x/net-0.52.0
• 843711c Bump golang.org/x/net from 0.51.0 to 0.52.0
• ac828ee Merge pull request #2596 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.49.0
• a25b1d1 Merge pull request #2597 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.6.1
• 62f5368 Bump softprops/action-gh-release from 2.5.0 to 2.6.1
• fd76f00 Bump golang.org/x/crypto from 0.48.0 to 0.49.0
• 455e3e7 crl: crl filename in der format should have .crl extension

Thanks!

Those were the changes on v0.30.0-rc6!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.30.0-rc2_amd64.tar.gz
• 📦 step-ca_0.30.0.rc2-1_amd64.deb
• 📦 step-ca-0.30.0.rc2-1.x86_64.rpm
• 📦 step-ca_0.30.0.rc2-1_arm64.deb
• 📦 step-ca-0.30.0.rc2-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.30.0-rc2_amd64.tar.gz
• 📦 step-ca_darwin_0.30.0-rc2_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.30.0-rc2_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --certificate step-ca_darwin_0.30.0-rc2_amd64.tar.gz.pem \ --signature step-ca_darwin_0.30.0-rc2_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.30.0-rc2_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 1f65119 Update cosign command
• bb9af7f Merge pull request #2540 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.9.4
• 5274d27 Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4
• 666bd40 Merge pull request #2541 from smallstep/dependabot/go_modules/google.golang.org/api-0.260.0
• 315dc53 Bump google.golang.org/api from 0.259.0 to 0.260.0
• 9f72cc5 Merge pull request #2543 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.4
• e433551 Bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4

Thanks!

Those were the changes on v0.30.0-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.30.0-rc1_amd64.tar.gz
• 📦 step-ca_0.30.0.rc1-1_amd64.deb
• 📦 step-ca-0.30.0.rc1-1.x86_64.rpm
• 📦 step-ca_0.30.0.rc1-1_arm64.deb
• 📦 step-ca-0.30.0.rc1-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.30.0-rc1_amd64.tar.gz
• 📦 step-ca_darwin_0.30.0-rc1_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.30.0-rc1_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --certificate step-ca_darwin_0.30.0-rc1_amd64.tar.gz.pem \ --signature step-ca_darwin_0.30.0-rc1_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.30.0-rc1_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• a7ceb2d Merge pull request #2533 from smallstep/mariano/transport-decorator
• 63231db Apply suggestions in code review
• 8912afb Merge branch 'master' into mariano/transport-decorator
• f1c54b8 Add missing commit
• da56c70 Apply suggestions from code review
• e86b66b Add HTTP transport decorator
• f088be2 Merge pull request #2530 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.8.0
• 61b8e72 Bump cloud.google.com/go/longrunning from 0.7.0 to 0.8.0
• a485329 Merge pull request #2529 from smallstep/dependabot/go_modules/golang.org/x/net-0.49.0
• bb8c54d Bump golang.org/x/net from 0.48.0 to 0.49.0
• f4a04b8 Merge pull request #2531 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.47.0
• 8127b38 Merge pull request #2532 from smallstep/dependabot/go_modules/google.golang.org/api-0.259.0
• e16cf5f Bump google.golang.org/api from 0.258.0 to 0.259.0
• 4c90aab Bump golang.org/x/crypto from 0.46.0 to 0.47.0
• ef8d580 Merge pull request #2526 from smallstep/fix-acme-db-warning-2102
• 7a9cfc6 Merge pull request #2519 from smallstep/carl/publish-packages-workflow
• 21021ff Warn when ACME provisioner is configured without database
• e9a1225 Merge branch 'master' into carl/publish-packages-workflow
• e6c864f Merge pull request #2525 from smallstep/herman/fix-root-not-found-tests
• 61bb5d6 Merge branch 'carl/publish-packages-workflow' of ssh://github.com/smallstep/certificates into carl/publish-packages-workflow
• 096faa9 Sync with CLI version
• d50d076 Merge branch 'master' into carl/publish-packages-workflow
• 979edbb Fix tests for root not found by fingerprint functionality
• 9b41df6 Merge pull request #1893 from smallstep/root-not-found-error-message
• 77853b1 Merge pull request #2523 from smallstep/mariano/cast
• 091b6a1 Fix linter errors
• af41874 Merge pull request #2522 from smallstep/mariano/trixie-changelog
• ac5123f Move trixie changelog to new section
• f71822f Merge pull request #2520 from smallstep/mariano/trixie-changelog
• 07d544c Lint fixes
• aeb739f Add changelog entry for #2493
• 8a71cba Merge pull request #2493 from smallstep/mariano/trixie
• b73f8b1 Standalone workflow to publish packages
• 031cc55 Merge pull request #2517 from smallstep/herman/fix-cloudcas-scep-ra
• 548717c Wrap Google Cloud CAS root and intermediate certificate parsing errors
• 99e8f6c Prevent panics when instantiating SCEP authority without intermediates
• cdcd89b Parse intermediates from Google Cloud CAS
• 6dd48ac Merge pull request #2515 from smallstep/mariano/renewer-iddle-connections
• eb10da1 Merge pull request #2513 from originaltrini0/fix-issue-#2013
• 5edadf7 Close idle connections on client certificate renew
• 2a22384 Fix missing version number while building step-ca
• 5284fbb Merge pull request #2512 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.8
• f349b04 Bump github.com/google/go-tpm from 0.9.7 to 0.9.8
• ccc90ca Merge pull request #2505 from smallstep/dependabot/go_modules/google.golang.org/api-0.258.0
• 9fe50b0 Use option.WithAuthCredentialsFile for Google API auth
• cf8479d Bump google.golang.org/api from 0.257.0 to 0.258.0
• b1da00c Merge pull request #2508 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.78.0
• c46e7ce Bump google.golang.org/grpc from 1.77.0 to 1.78.0
• 2f82cb1 Merge pull request #2506 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.16.0
• b3734f0 Bump github.com/googleapis/gax-go/v2 from 2.15.0 to 2.16.0
• 54715c8 Merge pull request #2502 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.11
• e5db0c2 Bump google.golang.org/protobuf from 1.36.10 to 1.36.11
• 8f63046 Merge pull request #2503 from smallstep/dependabot/go_modules/golang.org/x/net-0.48.0
• ec3698d Bump golang.org/x/net from 0.47.0 to 0.48.0
• 5398fc7 Merge pull request #2495 from smallstep/dependabot/go_modules/google.golang.org/api-0.257.0
• 9dec8fc Bump google.golang.org/api from 0.256.0 to 0.257.0
• b7ff5e9 Merge pull request #2496 from smallstep/dependabot/go_modules/golang.org/x/sync-0.19.0
• 7203cbf Merge pull request #2494 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.75.0
• 5767790 Bump golang.org/x/sync from 0.18.0 to 0.19.0
• 67276b5 Bump go.step.sm/crypto from 0.74.0 to 0.75.0
• 5f06a51 Fix linter errors
• 2d6fa86 Hardcode files in CMD
• fa265ab Add yubihsm-pkcs11
• 59b9262 Update Debian version to trixie
• 86bea27 Merge pull request #2492 from smallstep/herman/enable-govulncheck
• 3e90f37 Revert "Disable govulncheck until go 1.25.5 is available in github actions (#2490)"
• 72285d8 Apply suggestions from code review
• 38733da api: output a more helpful error message when root is not found

Thanks!

Those were the changes on v0.30.0-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.29.0_amd64.tar.gz
• 📦 step-ca_0.29.0-1_amd64.deb
• 📦 step-ca-0.29.0-1.x86_64.rpm
• 📦 step-ca_0.29.0-1_arm64.deb
• 📦 step-ca-0.29.0-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.29.0_amd64.tar.gz
• 📦 step-ca_darwin_0.29.0_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.29.0_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --certificate step-ca_darwin_0.29.0_amd64.tar.gz.pem \ --signature step-ca_darwin_0.29.0_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.29.0_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 992ff69 Merge pull request #2491 from smallstep/mariano/update
• 9d79c59 Merge branch 'master' into mariano/update
• 8e76e29 Disable govulncheck until go 1.25.5 is available in github actions (#2490)
• 1011f5f Improve validation in authorization path
• 48ed3a5 Changelog updates for preparing for v0.29.0 (#2488)
• 008e6ae Merge pull request #2487 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
• 895e8c6 Bump softprops/action-gh-release from 2.4.2 to 2.5.0
• 930e8fc Merge pull request #2477 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
• d753789 Bump golang.org/x/crypto from 0.44.0 to 0.45.0
• 07fa345 Merge pull request #2481 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.42.0
• 2d6b359 Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
• b15aea5 Merge pull request #2482 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
• 562fb7d Merge pull request #2483 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.17.0
• 0b1ac14 Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
• bbbe61e Bump google.golang.org/grpc from 1.76.0 to 1.77.0
• 2746cd0 Merge pull request #2474 from smallstep/dependabot/go_modules/golang.org/x/net-0.47.0
• 5e8fa9e Bump golang.org/x/net from 0.46.0 to 0.47.0
• 1bd9854 Merge pull request #2472 from smallstep/dependabot/go_modules/google.golang.org/api-0.256.0
• d37d1cb Bump google.golang.org/api from 0.255.0 to 0.256.0
• 1cf5fd4 Merge pull request #2471 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.44.0
• 6315e2c Merge pull request #2473 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.7
• 0f77bf6 Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
• d722add Bump golang.org/x/crypto from 0.43.0 to 0.44.0
• b5e8734 Merge pull request #2463 from provokateurin/feat/sd_notify
• ae73098 Merge pull request #2468 from smallstep/herman/upgrade-safecast-v2
• c39ef92 Update to v2 of github.com/ccoVeille/go-safecast
• 5205cc0 Merge pull request #2466 from smallstep/dependabot/go_modules/golang.org/x/sync-0.18.0
• 23fb09f Bump golang.org/x/sync from 0.17.0 to 0.18.0
• 5f6353b Merge pull request #2464 from smallstep/dependabot/go_modules/google.golang.org/api-0.255.0
• 130d0fc Bump google.golang.org/api from 0.254.0 to 0.255.0
• 1b93a98 Merge pull request #2465 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
• 68173e3 Merge pull request #2467 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
• 35702e7 Bump softprops/action-gh-release from 2.4.1 to 2.4.2
• a05f003 Bump go.step.sm/crypto from 0.73.0 to 0.74.0
• 0c79ee2 feat: Add sd_notify support
• 2204af1 Merge pull request #2461 from roeldev/feat-add-docker-init-envs
• 61e37b7 Add additional DOCKER_STEPCA_INIT_* envs
• 8f558df Merge pull request #2456 from smallstep/dependabot/go_modules/google.golang.org/api-0.254.0
• ea7a7f8 Bump google.golang.org/api from 0.253.0 to 0.254.0
• 9fe89ba Merge pull request #2457 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.8.1
• 6dd0965 Use go-safecast generic Convert function to convert integers
• 0f80781 Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
• bfbe9db Merge pull request #2455 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
• 69d8dd8 Add additional gosec linter exceptions to ACME linker
• 745fb7a Remove deprecated +build tags
• 18b418b Bump go.step.sm/crypto from 0.72.0 to 0.73.0
• cc7f147 Merge pull request #2447 from smallstep/dependabot/go_modules/google.golang.org/api-0.253.0
• d314d7f Merge pull request #2446 from smallstep/dependabot/go_modules/github.com/smallstep/linkedca-0.25.0
• 130ab6f Bump google.golang.org/api from 0.252.0 to 0.253.0
• 5bb8ca5 Bump github.com/smallstep/linkedca from 0.24.0 to 0.25.0
• 2a4c7b9 Merge pull request #2444 from smallstep/herman/acme-order-backdate
• 17a37a1 Fix backdate support for ACME provisioner
• 0f591d6 Merge pull request #2435 from jas4711/chmod-x
• f5954be Merge pull request #2436 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.72.0
• dffe74c Bump go.step.sm/crypto from 0.70.0 to 0.72.0
• 9364f1a Merge pull request #2440 from smallstep/dependabot/go_modules/google.golang.org/api-0.252.0
• 5779f39 Bump google.golang.org/api from 0.251.0 to 0.252.0
• 90c1265 Merge pull request #2438 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.7.0
• a0ed595 Bump cloud.google.com/go/longrunning from 0.6.7 to 0.7.0
• 30289f0 Merge pull request #2439 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.2
• 6acdeac Merge pull request #2437 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.7.0
• 83b41d6 Bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
• bcc8ce4 Bump github.com/ccoveille/go-safecast from 1.6.1 to 1.7.0
• f253cf6 Disable execute permission on source files (chmod -x)
• 3207fcf Merge pull request #2428 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.7
• a4aaebd Bump github.com/slackhq/nebula from 1.9.6 to 1.9.7
• f251f0e Merge pull request #2429 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.22.0
• c12742a Merge pull request #2426 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.1
• 04851e5 Merge pull request #2427 from smallstep/dependabot/go_modules/golang.org/x/net-0.46.0
• 3e2cd3b Bump golang.org/x/net from 0.44.0 to 0.46.0
• 6886...

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.29.0-rc1_amd64.tar.gz
• 📦 step-ca_0.29.0.rc1-1_amd64.deb
• 📦 step-ca-0.29.0.rc1-1.x86_64.rpm
• 📦 step-ca_0.29.0.rc1-1_arm64.deb
• 📦 step-ca-0.29.0.rc1-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.29.0-rc1_amd64.tar.gz
• 📦 step-ca_darwin_0.29.0-rc1_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.29.0-rc1_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --certificate step-ca_darwin_0.29.0-rc1_amd64.tar.gz.pem \ --signature step-ca_darwin_0.29.0-rc1_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.29.0-rc1_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 4fca283 Changelog updates for preparing for v0.29.0
• 930e8fc Merge pull request #2477 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
• d753789 Bump golang.org/x/crypto from 0.44.0 to 0.45.0
• 07fa345 Merge pull request #2481 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.42.0
• 2d6b359 Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
• b15aea5 Merge pull request #2482 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
• 562fb7d Merge pull request #2483 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.17.0
• 0b1ac14 Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
• bbbe61e Bump google.golang.org/grpc from 1.76.0 to 1.77.0
• 2746cd0 Merge pull request #2474 from smallstep/dependabot/go_modules/golang.org/x/net-0.47.0
• 5e8fa9e Bump golang.org/x/net from 0.46.0 to 0.47.0
• 1bd9854 Merge pull request #2472 from smallstep/dependabot/go_modules/google.golang.org/api-0.256.0
• d37d1cb Bump google.golang.org/api from 0.255.0 to 0.256.0
• 1cf5fd4 Merge pull request #2471 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.44.0
• 6315e2c Merge pull request #2473 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.7
• 0f77bf6 Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
• d722add Bump golang.org/x/crypto from 0.43.0 to 0.44.0
• b5e8734 Merge pull request #2463 from provokateurin/feat/sd_notify
• ae73098 Merge pull request #2468 from smallstep/herman/upgrade-safecast-v2
• c39ef92 Update to v2 of github.com/ccoVeille/go-safecast
• 5205cc0 Merge pull request #2466 from smallstep/dependabot/go_modules/golang.org/x/sync-0.18.0
• 23fb09f Bump golang.org/x/sync from 0.17.0 to 0.18.0
• 5f6353b Merge pull request #2464 from smallstep/dependabot/go_modules/google.golang.org/api-0.255.0
• 130d0fc Bump google.golang.org/api from 0.254.0 to 0.255.0
• 1b93a98 Merge pull request #2465 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
• 68173e3 Merge pull request #2467 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
• 35702e7 Bump softprops/action-gh-release from 2.4.1 to 2.4.2
• a05f003 Bump go.step.sm/crypto from 0.73.0 to 0.74.0
• 0c79ee2 feat: Add sd_notify support
• 2204af1 Merge pull request #2461 from roeldev/feat-add-docker-init-envs
• 61e37b7 Add additional DOCKER_STEPCA_INIT_* envs
• 8f558df Merge pull request #2456 from smallstep/dependabot/go_modules/google.golang.org/api-0.254.0
• ea7a7f8 Bump google.golang.org/api from 0.253.0 to 0.254.0
• 9fe89ba Merge pull request #2457 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.8.1
• 6dd0965 Use go-safecast generic Convert function to convert integers
• 0f80781 Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
• bfbe9db Merge pull request #2455 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
• 69d8dd8 Add additional gosec linter exceptions to ACME linker
• 745fb7a Remove deprecated +build tags
• 18b418b Bump go.step.sm/crypto from 0.72.0 to 0.73.0
• cc7f147 Merge pull request #2447 from smallstep/dependabot/go_modules/google.golang.org/api-0.253.0
• d314d7f Merge pull request #2446 from smallstep/dependabot/go_modules/github.com/smallstep/linkedca-0.25.0
• 130ab6f Bump google.golang.org/api from 0.252.0 to 0.253.0
• 5bb8ca5 Bump github.com/smallstep/linkedca from 0.24.0 to 0.25.0
• 2a4c7b9 Merge pull request #2444 from smallstep/herman/acme-order-backdate
• 17a37a1 Fix backdate support for ACME provisioner
• 0f591d6 Merge pull request #2435 from jas4711/chmod-x
• f5954be Merge pull request #2436 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.72.0
• dffe74c Bump go.step.sm/crypto from 0.70.0 to 0.72.0
• 9364f1a Merge pull request #2440 from smallstep/dependabot/go_modules/google.golang.org/api-0.252.0
• 5779f39 Bump google.golang.org/api from 0.251.0 to 0.252.0
• 90c1265 Merge pull request #2438 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.7.0
• a0ed595 Bump cloud.google.com/go/longrunning from 0.6.7 to 0.7.0
• 30289f0 Merge pull request #2439 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.2
• 6acdeac Merge pull request #2437 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.7.0
• 83b41d6 Bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
• bcc8ce4 Bump github.com/ccoveille/go-safecast from 1.6.1 to 1.7.0
• f253cf6 Disable execute permission on source files (chmod -x)
• 3207fcf Merge pull request #2428 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.7
• a4aaebd Bump github.com/slackhq/nebula from 1.9.6 to 1.9.7
• f251f0e Merge pull request #2429 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.22.0
• c12742a Merge pull request #2426 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.1
• 04851e5 Merge pull request #2427 from smallstep/dependabot/go_modules/golang.org/x/net-0.46.0
• 3e2cd3b Bump golang.org/x/net from 0.44.0 to 0.46.0
• 6886f5d Merge pull request #2430 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.76.0
• c604a7f Bump google.golang.org/grpc from 1.75.1 to 1.76.0
• c15499a Bump github.com/hashicorp/vault/api from 1.21.0 to 1.22.0
• ff3c087 Bump softprops/action-gh-release from 2.3.4 to 2.4.1
• 8f77cc7 Merge pull request #2421 from smallstep/dependabot/go_modules/...

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.4_amd64.tar.gz
• 📦 step-ca_0.28.4-1_amd64.deb
• 📦 step-ca-0.28.4-1.x86_64.rpm
• 📦 step-ca_0.28.4-1_arm64.deb
• 📦 step-ca-0.28.4-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.28.4_amd64.tar.gz
• 📦 step-ca_darwin_0.28.4_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.4_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --certificate step-ca_darwin_0.28.4_amd64.tar.gz.pem \ --signature step-ca_darwin_0.28.4_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.28.4_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 2c61c44 Update changelog (#2332)
• c86cf07 Merge pull request #2331 from smallstep/mariano/fix-tests
• 831d005 Fix gcp unit tests
• bc09e46 Merge pull request #2133 from ericnorris/feat-gcp-enable-organization-checking
• 0d9f051 Merge branch 'master' into feat-gcp-enable-organization-checking
• 197d0d3 Changelog updates (#2330)
• 2932225 Merge pull request #2329 from smallstep/dependabot/go_modules/google.golang.org/api-0.240.0
• b1dd5a6 Bump google.golang.org/api from 0.239.0 to 0.240.0
• 8b9bd89 refactor: make projectIDs authoritative
• a3db8de feat(gcp): enable organization checking

Thanks!

Those were the changes on v0.28.4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.4-rc2_amd64.tar.gz
• 📦 step-ca_0.28.4.rc2-1_amd64.deb
• 📦 step-ca-0.28.4.rc2-1.x86_64.rpm
• 📦 step-ca_0.28.4.rc2-1_arm64.deb
• 📦 step-ca-0.28.4.rc2-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.28.4-rc2_amd64.tar.gz
• 📦 step-ca_darwin_0.28.4-rc2_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.4-rc2_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \ --certificate step-ca_darwin_0.28.4-rc2_amd64.tar.gz.pem \ --signature step-ca_darwin_0.28.4-rc2_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ step-ca_darwin_0.28.4-rc2_amd64.tar.gz 

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 7d645e7 Fix a few revive linter issues

Thanks!

Those were the changes on v0.28.4-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.