smallstep/certificates v0.28.0

Step CA v0.28.0 (24-10-30)

on GitHub

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.0_amd64.tar.gz
• 📦 step-ca_0.28.0_amd64.deb

OSX Darwin

• 📦 step-ca_darwin_0.28.0_amd64.tar.gz
• 📦 step-ca_darwin_0.28.0_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.0_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.0_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.0_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• df13aae Update changelog for v0.28.0 (#2051)
• 77667e7 Merge pull request #2049 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.2
• 5147c60 Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
• efd324d Merge pull request #2048 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.2
• a51f670 Merge pull request #2047 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.1
• 9943bf1 Merge pull request #2050 from smallstep/dependabot/go_modules/google.golang.org/api-0.203.0
• bb8605c Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner (#2045)
• 95a6cad Bump google.golang.org/api from 0.201.0 to 0.203.0
• 99baf67 Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
• bfe436b Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
• 34ba7a2 Merge pull request #2046 from smallstep/herman/refactor-cli-utils-import
• b45b73f Use github.com/smallstep/cli-utils instead of go.step.sm/cli-utils
• 88443dd Use dnsNamesSubsetValidator for IID provisioners (#2044)
• 946bba2 Merge pull request #2040 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.5
• 61fb5f4 Merge pull request #2039 from smallstep/dependabot/go_modules/google.golang.org/api-0.201.0
• 5afe6b1 Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
• 6ce8f7d Bump google.golang.org/api from 0.200.0 to 0.201.0

Thanks!

Those were the changes on v0.28.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.