Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.0_amd64.tar.gz
• 📦 step-ca_0.28.0_amd64.deb

OSX Darwin

• 📦 step-ca_darwin_0.28.0_amd64.tar.gz
• 📦 step-ca_darwin_0.28.0_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.0_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.0_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.0_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• df13aaef0b9cb5f0d6e9c011695214dbafff7aca Update changelog for v0.28.0 (#2051)
• 77667e7f43fba96a720b07870856d75fa3503dca Merge pull request #2049 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.2
• 5147c6024049529b128cca9e9bc23f520b5c6331 Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
• efd324d6d62c58d848f303f46091ce8c7c95fca2 Merge pull request #2048 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.2
• a51f670f77179b9d69c9506e69caa0d45204fcaf Merge pull request #2047 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.1
• 9943bf1984b249bfac5820d5f7507a92c3b3b367 Merge pull request #2050 from smallstep/dependabot/go_modules/google.golang.org/api-0.203.0
• bb8605c079ca4aa5cc459ee3b3641a7735d93322 Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner (#2045)
• 95a6cad404fe5065bd74f3218da248a4b2840c84 Bump google.golang.org/api from 0.201.0 to 0.203.0
• 99baf6744aa02732fa3c8a2a5e3f95370ea0e5f0 Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
• bfe436b14560519d4c863a39dc713a0742414235 Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
• 34ba7a2f3eff1ae7da44dd3784eec4c15682f6ac Merge pull request #2046 from smallstep/herman/refactor-cli-utils-import
• b45b73f4cc9746b7c91252dccc6bf374002b3351 Use github.com/smallstep/cli-utils instead of go.step.sm/cli-utils
• 88443ddab988c5f1f80c4bd768342391326c7d07 Use dnsNamesSubsetValidator for IID provisioners (#2044)
• 946bba29bb1f02fde5e2c2f31cc63550aebb8b7e Merge pull request #2040 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.5
• 61fb5f4071c10b189056130b9c0341a3eb51b0ec Merge pull request #2039 from smallstep/dependabot/go_modules/google.golang.org/api-0.201.0
• 5afe6b1e549ebfbdc823206e3c82361d84f1da94 Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
• 6ce8f7d606d98d0d7f13ace1a2818fde18a2a82d Bump google.golang.org/api from 0.200.0 to 0.201.0

Thanks!

Those were the changes on v0.28.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.