github smallstep/certificates v0.26.1
Step CA v0.26.1 (24-04-22)

12 days ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.26.1_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.26.1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.26.1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • 9cbab5a Add changelog for 0.26.1 (#1812)
  • d6bf551 Merge pull request #1803 from smallstep/herman/fix-scep-vault-ra
  • f4d506f Merge pull request #1811 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.13.0
  • 1e5e267 Remove leftover debug print
  • 760014c go mod tidy
  • 2561a72 Dedupe CA and SCEP client creation logic
  • 3965305 Bump github.com/hashicorp/vault/api from 1.12.2 to 1.13.0
  • 65cfee5 Merge pull request #1810 from smallstep/dependabot/go_modules/google.golang.org/api-0.176.0
  • 8d4effc Bump google.golang.org/api from 0.172.0 to 0.176.0
  • 4a37559 Merge pull request #1809 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.44.6
  • d7ed031 Merge pull request #1808 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.16.0
  • 8720200 Rewrite SCEP integration tests to only use the HTTPS endpoint
  • 57a6b85 Bump go.step.sm/crypto from 0.44.4 to 0.44.6
  • 0ba61c5 Bump cloud.google.com/go/security from 1.15.6 to 1.16.0
  • b0fabe1 Add some SCEP integration tests
  • 113a6dd Remove reporting the CA mode from startup logs
  • 6bc0a86 Fix CA startup with Vault RA configuration
  • 07279dd Merge pull request #1801 from smallstep/herman/upgrade-crypto-v0.44.4
  • 4c6b0b3 Upgrade go.step.sm/crypto to v0.44.4
  • f1a2c68 Merge pull request #1798 from smallstep/herman/fix-instrumented-key-manager
  • 7df3ad0 Merge pull request #1797 from smallstep/mariano/init-scep
  • 4202d66 Remove debug statement
  • d6bbe5b Add support for kmsapi.Decrypter to instrumented key manager
  • 721345e Merge pull request #1793 from verytrap/master
  • db92404 chore: fix function names in comment
  • 725a913 Allow custom SCEP key manager
  • 397877a Merge pull request #1795 from smallstep/herman/fix-scep-failinfo-oid
  • b226b6e Prevent exposing any internal details in SCEP failure message
  • 02956ad Merge pull request #1794 from smallstep/herman/fix-scep-failinfo-oid
  • 037554e Fix the id-scep-failInfoText OID
  • 1513152 Merge pull request #1791 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.32.0
  • c9ba31a Bump github.com/newrelic/go-agent/v3 from 3.31.0 to 3.32.0
  • 1f69ff8 Merge pull request #1792 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.63.2
  • a76f071 Bump google.golang.org/grpc from 1.62.1 to 1.63.2
  • 08ef9fe Merge pull request #1789 from smallstep/dependabot/go_modules/golang.org/x/net-0.24.0
  • 57d6285 Bump golang.org/x/net from 0.22.0 to 0.24.0
  • d5758ba Merge pull request #1784 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.31.0
  • 166c496 Merge pull request #1785 from smallstep/dependabot/go_modules/google.golang.org/api-0.172.0
  • 1be0932 Merge pull request #1786 from smallstep/carl/winget-fix
  • f04a5e3 Fix winget release URL
  • d1523c9 Bump google.golang.org/api from 0.171.0 to 0.172.0
  • 44c48a7 Bump github.com/newrelic/go-agent/v3 from 3.30.0 to 3.31.0
  • 188e4e3 Add version number to winget branch name (#1783)

Thanks!

Those were the changes on v0.26.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Don't miss a new certificates release

NewReleases is sending notifications on new releases.