smallstep/certificates v0.28.1-rc2

Step CA v0.28.1-rc2 (24-11-19)

on GitHub

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.1-rc2_amd64.tar.gz
• 📦 step-ca_0.28.1.rc2-1_amd64.deb
• 📦 step-ca-0.28.1.rc2-1.x86_64.rpm
• 📦 step-ca_0.28.1.rc2-1_arm64.deb
• 📦 step-ca-0.28.1.rc2-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.28.1-rc2_amd64.tar.gz
• 📦 step-ca_darwin_0.28.1-rc2_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.1-rc2_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.1-rc2_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.1-rc2_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.1-rc2_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 35c1054 Testing
• e63b649 Make script +x.
• 330b28f Merge branch 'master' into jdoss/repos
• b1c3d18 Merge pull request #2072 from smallstep/dependabot/go_modules/google.golang.org/api-0.206.0
• e0196e4 Bump google.golang.org/api from 0.205.0 to 0.206.0
• 61af4c3 Merge pull request #2074 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.2
• 2847fbd Merge pull request #2073 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.2
• b9296c1 Merge pull request #2075 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.14.0
• 2b4894a Configure GitHub Actions to publish RPMs and Debs to packages.smallstep.com.
• a0048b4 Bump github.com/googleapis/gax-go/v2 from 2.13.0 to 2.14.0
• e9a1a7b Bump google.golang.org/protobuf from 1.35.1 to 1.35.2
• 35bc30b Bump go.step.sm/crypto from 0.54.0 to 0.54.2
• 707f537 Merge pull request #2071 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.1.0
• fc007df Bump softprops/action-gh-release from 2.0.9 to 2.1.0
• 7eccbc5 Merge pull request #2069 from smallstep/mariano/urn
• 1a2e647 Change URN for acme errors
• 73f97e2 Ignore non-constant format string linting error (#2068)
• fdaa665 Merge pull request #2066 from smallstep/mariano/webhook-errors
• 05295d9 Propagate human errors from webhooks
• 2f7690c Merge pull request #2065 from smallstep/mariano/challenge-webhook
• ff37bf1 Add unit tests for scepchallenge webhooks
• f2663dd Add data support on SCEPCHALLENGE webhooks
• 295892e Merge pull request #2060 from smallstep/dependabot/go_modules/google.golang.org/api-0.205.0
• 15e9041 Bump google.golang.org/api from 0.204.0 to 0.205.0
• 8465db8 Merge pull request #2062 from smallstep/dependabot/go_modules/golang.org/x/net-0.31.0
• 8313e47 Bump golang.org/x/net from 0.30.0 to 0.31.0
• c4c0d92 Merge pull request #2061 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.29.0
• 6dda3c1 Bump golang.org/x/crypto from 0.28.0 to 0.29.0
• e82c228 Merge pull request #2057 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.0.9
• 59deaa5 Merge pull request #2058 from smallstep/dependabot/go_modules/google.golang.org/api-0.204.0
• 1ab27b1 Bump google.golang.org/api from 0.203.0 to 0.204.0
• 0a0dfc0 Bump softprops/action-gh-release from 2.0.8 to 2.0.9

Thanks!

Those were the changes on v0.28.1-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.