Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.1_amd64.tar.gz
• 📦 step-ca_0.28.1-1_amd64.deb
• 📦 step-ca-0.28.1-1.x86_64.rpm
• 📦 step-ca_0.28.1-1_arm64.deb
• 📦 step-ca-0.28.1-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.28.1_amd64.tar.gz
• 📦 step-ca_darwin_0.28.1_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.1_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.1_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• d327203c1c2a1900bd019a0d9b38bd280fbd5c24 Add a few PRs to the 0.28.1 changelog (#2079)
• f5b45d8ae18446ea0a884b6666937a06a6047183 Changelog for 0.28.1 (#2078)
• f88a136bc23e62d32b7449de87cefda2a0f8dd00 Merge pull request #2076 from smallstep/jdoss/repos
• 354af7f914dff87d16fbbe8a4040d6653f9234d2 Merge branch 'master' into jdoss/repos
• c0d41d70ac4727a4cfbe35dcbbfdb6e82866bde0 Add p11-kit package.
• cd57b50db2842cb19f36be7ae495ecee44af2632 Add in PKCS11 packages.
• 7c9e3ff1181b3e845d68a992a114b55454908dff Merge pull request #2077 from smallstep/jdoss/HSM_container_packages
• ae54b5a152549cc2c78395022fd0707ad00091ca Add p11-kit package.
• e63b64904dc2659214e784bfb753cd968414471f Make script +x.
• 08515639bd80022af5c7681ed909a908f260f1a6 Add in PKCS11 packages.
• 330b28f83f19c5caa6e5d3c50eececf43632ea24 Merge branch 'master' into jdoss/repos
• b1c3d18d31bf5b59da403666534b79a6a31eb86f Merge pull request #2072 from smallstep/dependabot/go_modules/google.golang.org/api-0.206.0
• e0196e4860d72b8e2ea708f548f3fd425203a378 Bump google.golang.org/api from 0.205.0 to 0.206.0
• 61af4c3d79e7ebd5225882c26da550283b69936e Merge pull request #2074 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.2
• 2847fbd3f362636169c3c1b3ed5174f9e1efdc17 Merge pull request #2073 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.2
• b9296c1b6fcd45613d444f01b492bcd89933f764 Merge pull request #2075 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.14.0
• 2b4894a87136757bd01d1cf2be3c591f086b5572 Configure GitHub Actions to publish RPMs and Debs to packages.smallstep.com.
• a0048b414bbeb95b8a66e61128c18855ca867ab2 Bump github.com/googleapis/gax-go/v2 from 2.13.0 to 2.14.0
• e9a1a7ba158a84f6d6dbae4f099fe966036e62cb Bump google.golang.org/protobuf from 1.35.1 to 1.35.2
• 35bc30b1f5535a59a4693c946c00d76cbfd52ed9 Bump go.step.sm/crypto from 0.54.0 to 0.54.2
• 707f53722f23363cc5dc873434d87085d91ade7a Merge pull request #2071 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.1.0
• fc007dfd039e6821a736d03b7170203e0d0e7e64 Bump softprops/action-gh-release from 2.0.9 to 2.1.0
• 7eccbc51febc2a8f64142d3c8b35595cd3a22cba Merge pull request #2069 from smallstep/mariano/urn
• 1a2e64724ad944701a740005f3ed26ec2e6b2ecb Change URN for acme errors
• 73f97e244c02bd0a01b3c84f574063bca58b75b7 Ignore non-constant format string linting error (#2068)
• fdaa6657e1674a7231949af8de3aebb9dc12f8c2 Merge pull request #2066 from smallstep/mariano/webhook-errors
• 05295d9c6a8b0baaad0a351fb685594191c08db5 Propagate human errors from webhooks
• 2f7690c2ae1e91460dd4590cca0055e1dce1afad Merge pull request #2065 from smallstep/mariano/challenge-webhook
• ff37bf181190ef5143ef9588c22c0408a1c99b54 Add unit tests for scepchallenge webhooks
• f2663dd9d9bd3bc13296d7fd3fc30f4d3a0ae9fb Add data support on SCEPCHALLENGE webhooks
• 295892ecba96a058a7229e99f7c782f888635550 Merge pull request #2060 from smallstep/dependabot/go_modules/google.golang.org/api-0.205.0
• 15e904109a6c604d0b8c0e79d9f2dab7afc9bfa4 Bump google.golang.org/api from 0.204.0 to 0.205.0
• 8465db8b308f76cd896de23c7cf66efc7ff1eb2e Merge pull request #2062 from smallstep/dependabot/go_modules/golang.org/x/net-0.31.0
• 8313e4706180c326d022c410bdbf86d2f8ea0b06 Bump golang.org/x/net from 0.30.0 to 0.31.0
• c4c0d923d6748cc4d221b05a8d4a034e29a55d10 Merge pull request #2061 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.29.0
• 6dda3c1c4d836c7dade7b7d318f003f2f837cd6d Bump golang.org/x/crypto from 0.28.0 to 0.29.0
• e82c228a530968e553b475637a6ee789a8f0fce9 Merge pull request #2057 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.0.9
• 59deaa5180735fb4e63bbe3220846723f97cb002 Merge pull request #2058 from smallstep/dependabot/go_modules/google.golang.org/api-0.204.0
• 1ab27b13e5208ec387d0634949588ea2b08cb9b7 Bump google.golang.org/api from 0.203.0 to 0.204.0
• 0a0dfc008eef0f9747276a896f58bd9d788106d4 Bump softprops/action-gh-release from 2.0.8 to 2.0.9

Thanks!

Those were the changes on v0.28.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.