smallstep/certificates v0.28.2

Step CA v0.28.2 (25-02-21)

on GitHub

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.2_amd64.tar.gz
• 📦 step-ca_0.28.2-1_amd64.deb
• 📦 step-ca-0.28.2-1.x86_64.rpm
• 📦 step-ca_0.28.2-1_arm64.deb
• 📦 step-ca-0.28.2-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.28.2_amd64.tar.gz
• 📦 step-ca_darwin_0.28.2_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.2_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.2_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.2_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.2_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• d21e756 Add changelog for v0.28.2 (#2178)
• d4960a1 Merge pull request #2179 from smallstep/carl/linked-ca-init
• 3e4393e Update copy for linked CA init
• b22e186 Merge pull request #2171 from smallstep/dependabot/go_modules/github.com/smallstep/pkcs7-0.2.1
• 8debf5b Bump github.com/smallstep/pkcs7 from 0.1.1 to 0.2.1
• 8610bf6 Merge pull request #2175 from smallstep/dependabot/go_modules/google.golang.org/api-0.221.0
• f59221b Bump google.golang.org/api from 0.220.0 to 0.221.0
• 3d94255 Merge pull request #2172 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.9.0
• 0ce1ecd Bump github.com/hashicorp/vault/api/auth/aws from 0.8.0 to 0.9.0
• 497cb20 Merge pull request #2174 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.9.0
• 9e717d7 Bump github.com/hashicorp/vault/api/auth/approle from 0.8.0 to 0.9.0
• 3db57f7 Merge pull request #2173 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.9.0
• ed2c5ca Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.8.0 to 0.9.0
• e38dec9 Merge pull request #2167 from smallstep/herman/upgrade-linter
• 27944b4 Fix linter issues
• 86c04f0 Merge pull request #2166 from smallstep/dependabot/go_modules/google.golang.org/api-0.220.0
• e236934 Bump to Go v1.22.12
• dca1c6b Bump google.golang.org/api from 0.219.0 to 0.220.0
• 726e0dc Merge pull request #2164 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.1
• d48c5a1 Merge pull request #2165 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.5
• e0ffc47 Merge pull request #2163 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.33.0
• b3f7349 Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
• 791e2af Bump github.com/go-chi/chi/v5 from 5.2.0 to 5.2.1
• 52a4a1b Bump golang.org/x/crypto from 0.32.0 to 0.33.0
• 3159a74 Merge pull request #2153 from smallstep/dependabot/go_modules/google.golang.org/api-0.219.0
• 1f78066 Merge pull request #2154 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
• 14b6f61 Bump go.step.sm/crypto from 0.57.0 to 0.57.1
• 9dabb19 Bump google.golang.org/api from 0.218.0 to 0.219.0
• cf1ef2a Merge pull request #2151 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
• f879d10 Bump github.com/golang/glog from 1.2.3 to 1.2.4
• 4ff06cf Merge pull request #2149 from smallstep/dependabot/go_modules/google.golang.org/api-0.218.0
• b4cddb4 Bump google.golang.org/api from 0.217.0 to 0.218.0
• 1df134e Merge pull request #2147 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.4
• c70a072 Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
• 58dca0f Merge pull request #2148 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
• b0c0344 Bump google.golang.org/grpc from 1.69.4 to 1.70.0
• 93cd8fc Merge pull request #2141 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
• 6b1a82d Merge pull request #2144 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.36.0
• 775071a Merge pull request #2142 from smallstep/dependabot/go_modules/google.golang.org/api-0.217.0
• 54ea865 Bump google.golang.org/api from 0.216.0 to 0.217.0
• 565cab2 Merge pull request #2143 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.3
• 78979c6 Bump github.com/newrelic/go-agent/v3 from 3.35.1 to 3.36.0
• 9d90fb8 Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
• a291fee Bump go.step.sm/crypto from 0.56.0 to 0.57.0
• a729f1f Merge pull request #2140 from smallstep/herman/fix-download-urls
• d1cfae0 Fix download URLs that were pointing to cli
• 41820c8 Merge pull request #2138 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
• e76ae73 Bump google.golang.org/grpc from 1.69.2 to 1.69.4
• c5a0249 Merge pull request #2137 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.2
• 97d1692 Merge pull request #2136 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
• a7f7a15 Bump golang.org/x/net from 0.33.0 to 0.34.0
• 7a180e4 Bump google.golang.org/protobuf from 1.36.1 to 1.36.2
• b1195f2 Merge pull request #2135 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
• 57b0378 Merge pull request #2139 from smallstep/dependabot/go_modules/google.golang.org/api-0.216.0
• 6283fe6 Bump google.golang.org/api from 0.214.0 to 0.216.0
• 9f50dd9 Bump softprops/action-gh-release from 2.2.0 to 2.2.1
• 47c08d5 Merge pull request #2131 from smallstep/herman/unflake-request-id-integration-test
• b3fb927 Add comment to requireCAServerToBeAvailable
• c2a6b5b Wait till a connection to the CA host/port can be made
• cda0eec Merge pull request #2129 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.3
• 6796e4f Bump cloud.google.com/go/security from 1.18.2 to 1.18.3
• 98ddef5 Merge pull request #2127 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.12.0
• 1d965aa Merge pull request #2130 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.32.0
• f7cd3ba Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0
• 2dd29b1 Merge pull request #2128 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.4
• 1ecf556 Bump golang.org/x/crypto from 0.31.0 to 0.32.0
• 164f9a9 Bump cloud.google.com/go/longrunning from 0.6.3 to 0.6.4
• e57a3ca Merge pull request #2126 from smallstep/herman/upgrade-linkedca-v0.23.0
• f473632 Use github.com/smallstep/linkedca @ v0.23.0
• 3f9dc06 Merge pull request #2124 from smallstep/mariano/payloadformat
• ba9e082 Add attestation format to challenge
• 143e484 Merge pull request #2123 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.1
• 7847e67 Bump google.golang.org/protobuf from 1.36.0 to 1.36.1
• f812cf2 Allow storing the attestation payload (#2114)
• 232f464 Merge pull request #2117 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.2
• c917e97 Bump google.golang.org/grpc from 1.69.0 to 1.69.2
• 2dce25c Merge pull request #2118 from smallstep/dependabot/go_modules/google.golang.org/api-0.214.0
• c70a905 Bump google.golang.org/api from 0.212.0 to 0.214.0
• 3bf1bba Merge pull request #2116 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.3
• 7398b43 Merge pull request #2120 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.14.1
• 45fe6ce Merge pull request #2119 from smallstep/dependabot/go_modules/github.com/smallstep/pkcs7-0.1.1
• db0377c Bump github.com/googleapis/gax-go/v2 from 2.14.0 to 2.14.1
• 19bcc33 Bump github.com/smallstep/pkcs7
• ab422b2 Bump github.com/google/go-tpm from 0.9.2 to 0.9.3
• cba7add Merge pull request #2113 from smallstep/mariano/fix-2101
• ac5b36f Upgrade golang.org/x/net
• 4af059b Upgrade crypto with support for imported keys on YibiKey KMS
• 6938c78 Merge pull request #2107 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.0
• 97c5e69 Merge pull request #2106 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.0
• 2a528c9 Bump github.com/go-chi/chi/v5 from 5.1.0 to 5.2.0
• 197bcd0 Bump google.golang.org/grpc from 1.68.1 to 1.69.0
• ea2016b Merge pull request #2110 from smallstep/dependabot/go_modules/google.golang.org/api-0.211.0
• a085c22 Bump google.golang.org/api from 0.210.0 to 0.211.0
• 7dbc429 Merge pull request #2109 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
• 91faf6a Merge pull request #2108 from smallstep/dependabot/go_modules/golang.org/x/net-0.32.0
• b071e0c Merge pull request #2111 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
• 1bc4ede Bump softprops/action-gh-release from 2.1.0 to 2.2.0
• 9192369 Bump golang.org/x/crypto from 0.30.0 to 0.31.0
• 397e17b Bump golang.org/x/net from 0.31.0 to 0.32.0
• 351287d Merge pull request #2104 from smallstep/mariano/wraptransport
• 98087fe Move wrap transport initialization to constructor
• 809c702 Transport wrappers (#2103)
• c986962 internal/httptransport: initial implementation of the package (#2098)
• 51e253b Merge pull request #2097 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.5
• 4c7aa8a Add test case for Nebula certificate errors
• 9000271 Fix new return value from nebula.NewCAPoolFromBytes
• f902049 Merge pull request #2094 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.68.1
• 7a7714f Merge pull request #2096 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.30.0
• 30dd9a6 Bump google.golang.org/grpc from 1.67.1 to 1.68.1
• 7df5f54 Bump golang.org/x/crypto from 0.29.0 to 0.30.0
• dbeedf3 Merge pull request #2095 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
• 9f68609 Merge pull request #2093 from smallstep/dependabot/go_modules/google.golang.org/api-0.210.0
• 43400d6 Bump github.com/slackhq/nebula from 1.9.4 to 1.9.5
• eb1b7e0 Bump go.step.sm/crypto from 0.54.2 to 0.55.0
• abfcc59 Bump google.golang.org/api from 0.209.0 to 0.210.0
• 6b8da39 Merge pull request #2082 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.3
• 8cffe10 Merge pull request #2084 from smallstep/dependabot/go_modules/google.golang.org/api-0.209.0
• 09b917b Merge pull request #2083 from smallstep/dependabot/go_modules/github.com/stretchr/testify-1.10.0
• e2e3f36 Bump google.golang.org/api from 0.206.0 to 0.209.0
• 29e1811 Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
• e93d542 Bump cloud.google.com/go/longrunning from 0.6.2 to 0.6.3
• bc1accb add go.uber.org/mock to tools.go, generate mocks using go run (#2080)

Thanks!

Those were the changes on v0.28.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.