smallstep/certificates v0.18.2

Step CA v0.18.2 (22-03-01)

on GitHub

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.18.2_amd64.tar.gz
• 📦 step-ca_0.18.2_amd64.deb

OSX Darwin

• 📦 step-ca_darwin_0.18.2_amd64.tar.gz
• 📦 step-ca_darwin_0.18.2_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.18.2_arm64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.18.2_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.18.2_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• bf8155f Merge pull request #840 from smallstep/changelog/PR829
• b64d1e1 Add entry in changelog.
• 15b1049 Fix json tag for Azure.ObjectIDs.
• 6f46cdb Merge pull request #829 from vijayjt/new-azure-token-authz-options
• 18d99b9 Merge pull request #838 from smallstep/max/validate-provisioner-before-store
• 51210df changelog update
• a79d4af change return value of generateProvisionerConfig to value
• 6030f8b Validate provisioner configuration before storing in DB
• 7a32c31 Update linkedca dependency version
• b128e37 Add SubscriptionIDs and ObjectIDs to provisioner-linkedca conversion functions
• 4a10f2c Rename new fields as per feedback to remove AAD from the name
• dedd136 Merge pull request #831 from smallstep/max/psql
• 9d885e6 bump nosql for postgres support
• 8b68bed Add support for validation of certificate requests using Azure subscription and AAD object IDs. See #735
• c178863 Merge pull request #828 from smallstep/update-changelog
• 3a5312c Add support for AuthorizationCrt in changelog.
• 28af606 Merge pull request #827 from smallstep/x5c-template
• abe951d Fix name of the variable in comment.
• a0cf808 Make the X5C leaf certificate available to the templates.
• 1d09d14 Merge pull request #826 from smallstep/herman/changelogs-20220215
• af17b6a Make copyright year dynamic
• 0b33784 Update changelog
• 4ebf43c Merge pull request #820 from smallstep/herman/acme-api
• 5b713a5 Change CM link
• 5cb23c6 Merge pull request #804 from smallstep/herman/normalize-ipv6-dns-names
• d00729d Refactor ACME Admin API
• 588c72c Merge pull request #817 from Cpcrook/chore/#816-provisioner-decryption-error-messaging
• 11637b5 Add descriptive provisioner JWK decryption error messages
• 039d245 changelog update
• bfa2245 Merge branch 'master' into herman/normalize-ipv6-dns-names
• e887cca Ensure the CA TLS certificate represents IPv6 DNS names as IP in cert
• 1fe7362 Normalize IPv6 addresses in ACME linker
• 716b946 Normalize IPv6 hostname addresses

Thanks!

Those were the changes on v0.18.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.