Official Release Artifacts
Linux
OSX Darwin
Windows
For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.
Don't see the artifact you need? Open an issue here.
Signatures and Checksums
step-ca uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign to verify a release artifact:
cosign verify-blob \
--certificate step-ca_darwin_0.27.5_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.27.5_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.27.5_amd64.tar.gz
The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.
Changelog
- 8d0b4d7 Update changelog for 0.27.5 (#2035)
- d4f96b5 Merge pull request #2032 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.16
- 89a4708 Bump github.com/urfave/cli from 1.22.15 to 1.22.16
- 3aa8627 Merge pull request #2031 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.0
- 3e2be3e Merge pull request #2029 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.0
- 7e4560e Merge pull request #2030 from smallstep/dependabot/go_modules/google.golang.org/api-0.200.0
- 4d59f35 Merge pull request #2034 from smallstep/mariano/http-client
- 6b872e8 Do not fail creating the provisioner HTTP client
- ac93ce8 Bump github.com/newrelic/go-agent/v3 from 3.34.0 to 3.35.0
- 2831a8a Bump google.golang.org/api from 0.199.0 to 0.200.0
- b0acbee Bump go.step.sm/crypto from 0.53.0 to 0.54.0
- 03c4b18 Merge pull request #2020 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.1
- 55b097a Fix protobuf enum field type error message comparison test
- ebcb6a1 Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
- 46b7e12 Merge pull request #2021 from smallstep/dependabot/go_modules/golang.org/x/net-0.30.0
- 43b68da Bump golang.org/x/net from 0.29.0 to 0.30.0
- 01b8a67 Merge pull request #2022 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.28.0
- cd87739 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
- 26b7ca6 Merge pull request #1994 from smallstep/herman/pkcs7-windows-scep-fix
- bd49471 Fix and/or silence linter issues
- 4545659 Fix SCEP Windows client integration test for Go 1.23
- 69486d3 Refactor preparation of test SCEP CAs
- a0dd8d5 Add test case emulating Windows SCEP client
- f1a8d1a Merge pull request #2015 from smallstep/dependabot/go_modules/google.golang.org/api-0.199.0
- a8fa6e0 Bump google.golang.org/api from 0.198.0 to 0.199.0
- b8d5147 Merge pull request #2018 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.67.1
- 442677f Bump google.golang.org/grpc from 1.67.0 to 1.67.1
- a8c2f4d Merge pull request #2017 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.53.0
- 8a7d3cf Bump go.step.sm/crypto from 0.52.0 to 0.53.0
- 45f44e4 Add option for the logging middleware to log real IP (#2002)
- 5909db6 Merge pull request #2009 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.1
- 3520d17 Merge pull request #2007 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.4
- 27b1dd4 Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
- b599056 Bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4
- 2dc75cf Merge pull request #2005 from smallstep/dependabot/go_modules/google.golang.org/api-0.198.0
- ab71b58 Merge pull request #2006 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.1
- 0a8ac03 Merge pull request #2008 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.8.0
- 65aae5d Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.7.0 to 0.8.0
- 964ecd9 Bump cloud.google.com/go/security from 1.18.0 to 1.18.1
- ebe782b Bump google.golang.org/api from 0.197.0 to 0.198.0
- e7841d8 Merge pull request #1998 from smallstep/dependabot/go_modules/google.golang.org/api-0.197.0
- cb6e474 Merge pull request #1999 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.8.0
- dee71eb Bump google.golang.org/api from 0.196.0 to 0.197.0
- 705f90d Merge pull request #1997 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.52.0
- 4b19f81 Bump github.com/hashicorp/vault/api/auth/approle from 0.7.0 to 0.8.0
- bc56c9a Merge pull request #1996 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.8.0
- d7168a6 Merge pull request #2000 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.4
- e9f3bc4 Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
- edba68b Bump go.step.sm/crypto from 0.51.2 to 0.52.0
- 6be2a41 Bump github.com/hashicorp/vault/api/auth/aws from 0.7.0 to 0.8.0
- 35a4d6e Fix typo in legacy X509 certificate parser comment
- f088f92 Fix for failing Windows SCEP enrollment certificates
Thanks!
Those were the changes on v0.27.5!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.