Official Release Artifacts
Linux
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.26.0_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.26.0_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.26.0_amd64.tar.gz
The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.
Changelog
- 395a3ee Update go.step.sm/crypto (#1781)
- 4772d7c Merge pull request #1780 from smallstep/herman/update-changelog-20240328
- 854288a Update changelog for
v0.26.0release - 4016b69 Merge pull request #1776 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.12.2
- b5b723e Merge pull request #1775 from smallstep/dependabot/go_modules/google.golang.org/api-0.171.0
- 0a6e79a Merge pull request #1778 from smallstep/dependabot/github_actions/dependabot/fetch-metadata-2.0.0
- 9d86361 Bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2
- 7e05343 Merge pull request #1774 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.44.1
- 014b4ef Bump dependabot/fetch-metadata from 1.6.0 to 2.0.0
- 21734f7 Bump google.golang.org/api from 0.169.0 to 0.171.0
- 927cd97 Bump go.step.sm/crypto from 0.43.1 to 0.44.1
Thanks!
Those were the changes on v0.26.0!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.