smallstep/certificates v0.28.3-rc1 on GitHub

Official Release Artifacts

Linux

OSX Darwin

Windows

📦 step-ca_windows_0.28.3-rc1_amd64.zip

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.3-rc1_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.3-rc1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.3-rc1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

dfdb779 Changelog for v0.28.3 (#2215)
d17e2c5 Merge pull request #2214 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.6.0
4865fdb Bump github.com/ccoveille/go-safecast from 1.5.0 to 1.6.0
ac9048d Merge pull request #2212 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.4
450a350 Bump cloud.google.com/go/security from 1.18.3 to 1.18.4
7afff07 Merge pull request #2213 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.13.0
fa6fd96 Merge pull request #2210 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.6
67aaded Bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0
9b7e611 Bump cloud.google.com/go/longrunning from 0.6.5 to 0.6.6
6ce27d3 Merge pull request #2205 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
e26f891 Bump golang.org/x/net from 0.35.0 to 0.37.0
0cae1f7 Merge pull request #2202 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
8e5db6a Merge pull request #2203 from smallstep/dependabot/go_modules/google.golang.org/api-0.224.0
02197ad Bump go.step.sm/crypto from 0.59.0 to 0.59.1
c3f6a17 Bump google.golang.org/api from 0.223.0 to 0.224.0
ed2c62d Merge pull request #2204 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.21.1
4d44e8c Merge pull request #2206 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.5
0644a50 Bump cloud.google.com/go/longrunning from 0.6.4 to 0.6.5
32178ed Bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1
9b241ec Merge pull request #2196 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
f289a00 Bump go.step.sm/crypto from 0.58.0 to 0.59.0
e782f36 Merge pull request #2197 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.35.0
b3c3d89 Bump golang.org/x/crypto from 0.34.0 to 0.35.0
bfc8b0c Merge pull request #2195 from smallstep/dependabot/go_modules/google.golang.org/api-0.223.0
69eca5c Merge pull request #2194 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
7ae7157 Merge pull request #2198 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.37.0
cfc43f8 Bump github.com/newrelic/go-agent/v3 from 3.36.0 to 3.37.0
ad635f9 Bump google.golang.org/api from 0.222.0 to 0.223.0
4523a13 Bump github.com/smallstep/cli-utils from 0.11.0 to 0.12.1
1ef0e4b Merge pull request #2192 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
3f840bd Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
b5d7f59 Merge pull request #2190 from smallstep/herman/fix-cast-test-32bit
8609012 Fix cast package tests on linux/arm32
7efdfe5 Merge pull request #2189 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
c22889d Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
b02df4f Merge pull request #2188 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.11.0
c3f701f Merge pull request #2184 from smallstep/dependabot/go_modules/google.golang.org/api-0.222.0
e9dbc98 Bump github.com/smallstep/cli-utils from 0.10.0 to 0.11.0
8b6b973 Bump google.golang.org/api from 0.221.0 to 0.222.0
37ee518 Merge pull request #2187 from smallstep/herman/fix-ci
3c4af2e Use Go 1.23.6 and run go mod tidy
87fe3c1 Bump golang.org/x/crypto from 0.33.0 to 0.34.0
b077a19 Merge pull request #2183 from smallstep/dependabot/go_modules/github.com/google/go-cmp-0.7.0
0979b30 Merge pull request #2182 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.21.0
1f43c3d Merge pull request #2186 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
f30913c Bump go.step.sm/crypto from 0.57.1 to 0.58.0
64bfbfd Bump github.com/google/go-cmp from 0.6.0 to 0.7.0
aec4c80 Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0

Thanks!

Those were the changes on v0.28.3-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

smallstep/certificates v0.28.3-rc1 Step CA v0.28.3-rc1 (25-03-18) on GitHub