Official Release Artifacts

Linux

• 📦 step-ca_linux_0.27.5_amd64.tar.gz
• 📦 step-ca_0.27.5_amd64.deb

OSX Darwin

• 📦 step-ca_darwin_0.27.5_amd64.tar.gz
• 📦 step-ca_darwin_0.27.5_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.27.5_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.27.5_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.27.5_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.27.5_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 8d0b4d78ddd2f01784e66ef20c537c018645e799 Update changelog for 0.27.5 (#2035)
• d4f96b537f533818b22e853ad625379719214643 Merge pull request #2032 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.16
• 89a4708f192cb7b7ea6a5b9a9af268a7ba44aa01 Bump github.com/urfave/cli from 1.22.15 to 1.22.16
• 3aa8627b123427f05e208013ed34da696ee71610 Merge pull request #2031 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.0
• 3e2be3e87ff99ef18cd5b5aac937a17013d40bd3 Merge pull request #2029 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.0
• 7e4560eea2346e23ba353b150ead66ae772b0550 Merge pull request #2030 from smallstep/dependabot/go_modules/google.golang.org/api-0.200.0
• 4d59f35212b1e02f605844df6e57526931a9fea0 Merge pull request #2034 from smallstep/mariano/http-client
• 6b872e8806a513b107659897dc20fdc2b92c3dfe Do not fail creating the provisioner HTTP client
• ac93ce8d4ecb098374fb54c26361dfeddb78a0d1 Bump github.com/newrelic/go-agent/v3 from 3.34.0 to 3.35.0
• 2831a8a58afb0d73d20aa3e9ca04314e4615c1cd Bump google.golang.org/api from 0.199.0 to 0.200.0
• b0acbeed40a8dde53a4d16dc886ea1c4f42fcf6b Bump go.step.sm/crypto from 0.53.0 to 0.54.0
• 03c4b18ec1099a4c93629169d4c48783e608d2f8 Merge pull request #2020 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.1
• 55b097a8ec6cceed5b9ae4edf6daca6db5d00f87 Fix protobuf enum field type error message comparison test
• ebcb6a1d17c48f84b7f5766c6baf93683e436299 Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
• 46b7e125445cbc40237f244e4169c83f1a3f1129 Merge pull request #2021 from smallstep/dependabot/go_modules/golang.org/x/net-0.30.0
• 43b68da49dea3a4e70ffee8d22784196bae577c3 Bump golang.org/x/net from 0.29.0 to 0.30.0
• 01b8a672d00faf322de7420197c42bdbcf0c3bf3 Merge pull request #2022 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.28.0
• cd87739b9fd4f7901b93d496045195b49b1a6867 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
• 26b7ca65f9f3c8294cc04319630e556738654fe9 Merge pull request #1994 from smallstep/herman/pkcs7-windows-scep-fix
• bd4947121d245664a2fbe72b3118c6bf24748f54 Fix and/or silence linter issues
• 45456591d65c5d3d9c3ce6fa6f87ac2c8e59bcdb Fix SCEP Windows client integration test for Go 1.23
• 69486d388f331c3bc7ac1a70892f5376c8819db9 Refactor preparation of test SCEP CAs
• a0dd8d53eeb0be0734a3641987b85281f5b47465 Add test case emulating Windows SCEP client
• f1a8d1a4edfd75c986b9a83104d045f2b4953cf7 Merge pull request #2015 from smallstep/dependabot/go_modules/google.golang.org/api-0.199.0
• a8fa6e0ca9fca335d6b0c66793c378685bf7c5d9 Bump google.golang.org/api from 0.198.0 to 0.199.0
• b8d51478da904bfef11d6c00cfd17900dc3d2ab9 Merge pull request #2018 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.67.1
• 442677fae00fcd3b01ee16c3c1f311148bc92c85 Bump google.golang.org/grpc from 1.67.0 to 1.67.1
• a8c2f4db4444a82e032130aae1c5a404d0122019 Merge pull request #2017 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.53.0
• 8a7d3cfaafad615df1981798169d776a17e98c51 Bump go.step.sm/crypto from 0.52.0 to 0.53.0
• 45f44e4432fef2b617f6dc49ebcf2c31c6138606 Add option for the logging middleware to log real IP (#2002)
• 5909db65014d9ded9e0410170199678f1a34cfdf Merge pull request #2009 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.1
• 3520d17f110a86cdec1ea0b3cf5dfda27193bfc9 Merge pull request #2007 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.4
• 27b1dd45f67442419d65e4cda4bdd0355a25de9c Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
• b599056f8bc8bc6f644e085a2dbeeaa7f5cd2f11 Bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4
• 2dc75cfd89608179db162b3010f21609438791d4 Merge pull request #2005 from smallstep/dependabot/go_modules/google.golang.org/api-0.198.0
• ab71b5806034bd7469d35bdef88d268856b54813 Merge pull request #2006 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.1
• 0a8ac0314e8044e1a40fd8399e15a35e8a4f808c Merge pull request #2008 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.8.0
• 65aae5d6a7816374fdb27caebc13faf1da38ab84 Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.7.0 to 0.8.0
• 964ecd92ce3d6724fb4f6fe69a63b3055360b08f Bump cloud.google.com/go/security from 1.18.0 to 1.18.1
• ebe782be8a7f77ba1c5f5e3b4fd38dfa108c625b Bump google.golang.org/api from 0.197.0 to 0.198.0
• e7841d889be9e57af0fe8fe5b66a9943e6af9d3b Merge pull request #1998 from smallstep/dependabot/go_modules/google.golang.org/api-0.197.0
• cb6e474959d7d3802c1c15bc7e40a47a512de2eb Merge pull request #1999 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.8.0
• dee71eb9cec6c71ca037bec7d36a0e2f6692aff8 Bump google.golang.org/api from 0.196.0 to 0.197.0
• 705f90db098cf07518791c1ca26ee69b54a14cc9 Merge pull request #1997 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.52.0
• 4b19f8153c37eb9457cfabe491383a766993cdd0 Bump github.com/hashicorp/vault/api/auth/approle from 0.7.0 to 0.8.0
• bc56c9a1742741cc36199326a674638811d7694d Merge pull request #1996 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.8.0
• d7168a6464a5d3dcd7df0d3443630fe453459879 Merge pull request #2000 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.4
• e9f3bc4ef48fd6e3f9ab68ffabdd81cebc04ec12 Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
• edba68b65096ac720863dbde985661fccbd443cd Bump go.step.sm/crypto from 0.51.2 to 0.52.0
• 6be2a41ead26376f61eb18075624be86fd338ebd Bump github.com/hashicorp/vault/api/auth/aws from 0.7.0 to 0.8.0
• 35a4d6e6a40b12236019df861b9984caabc0c5b8 Fix typo in legacy X509 certificate parser comment
• f088f92aee8c5a96cf2dd4829a7efabf56330efa Fix for failing Windows SCEP enrollment certificates

Thanks!

Those were the changes on v0.27.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.