Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.2_amd64.tar.gz
• 📦 step-ca_0.28.2-1_amd64.deb
• 📦 step-ca-0.28.2-1.x86_64.rpm
• 📦 step-ca_0.28.2-1_arm64.deb
• 📦 step-ca-0.28.2-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.28.2_amd64.tar.gz
• 📦 step-ca_darwin_0.28.2_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.2_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.2_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.2_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.2_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• d21e756af0d310af38afe36b41875e9003d4873c Add changelog for v0.28.2 (#2178)
• d4960a194b626a8ee114a6277034e14dfde87c19 Merge pull request #2179 from smallstep/carl/linked-ca-init
• 3e4393e1275920460b0cb49e9caf47ae88a60656 Update copy for linked CA init
• b22e186ae944440f03386e8c45bd9db229c4dc7d Merge pull request #2171 from smallstep/dependabot/go_modules/github.com/smallstep/pkcs7-0.2.1
• 8debf5bc971749f109f216956808310fa42a55c0 Bump github.com/smallstep/pkcs7 from 0.1.1 to 0.2.1
• 8610bf631e00b65c549c8fa7089ac51a2c61a82d Merge pull request #2175 from smallstep/dependabot/go_modules/google.golang.org/api-0.221.0
• f59221b9eb876f4f8be673c7a40f52a14ce52b80 Bump google.golang.org/api from 0.220.0 to 0.221.0
• 3d942551413ab036f3a9d066d3913b63dbc9f88e Merge pull request #2172 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.9.0
• 0ce1ecd1a5f36f7a3852497cba5057ba784a693b Bump github.com/hashicorp/vault/api/auth/aws from 0.8.0 to 0.9.0
• 497cb20a193bbfd7bf2e1c622fdc0d315d47992d Merge pull request #2174 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.9.0
• 9e717d77488978770d4872fe3f7bc757214e9228 Bump github.com/hashicorp/vault/api/auth/approle from 0.8.0 to 0.9.0
• 3db57f724abfb4b9d4a08ee5ee75c721af4f5b58 Merge pull request #2173 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.9.0
• ed2c5ca81e6d560fb9262592e63fde203d4ea6a2 Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.8.0 to 0.9.0
• e38dec9d098dc32f2c593b08145467933817a452 Merge pull request #2167 from smallstep/herman/upgrade-linter
• 27944b4eaee2c5cc32852ade074a1affa1e91f8d Fix linter issues
• 86c04f0ce830c0a9d2d3c23c8bb531a77857cae7 Merge pull request #2166 from smallstep/dependabot/go_modules/google.golang.org/api-0.220.0
• e236934007849c9e61dfec0a4d1c447e6b67f4d4 Bump to Go v1.22.12
• dca1c6b1e09e4d515b0864a205399bec8f0410ab Bump google.golang.org/api from 0.219.0 to 0.220.0
• 726e0dcf8ad9f1045fc414d114ffef3af0bdf68a Merge pull request #2164 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.1
• d48c5a10787fa90e927154e6896596cd3b011e6f Merge pull request #2165 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.5
• e0ffc4706b7c2196c5f02f826b045709efd791e7 Merge pull request #2163 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.33.0
• b3f73499ac1b394666ececc2e3d40e9cb69d249d Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
• 791e2af9123ba3e777e373b9e3f508e06e095064 Bump github.com/go-chi/chi/v5 from 5.2.0 to 5.2.1
• 52a4a1b7d7417fad1e7f1e4140a3514f411c1b68 Bump golang.org/x/crypto from 0.32.0 to 0.33.0
• 3159a74c5ecfc8ae8a49e6066c7a4be3a7018711 Merge pull request #2153 from smallstep/dependabot/go_modules/google.golang.org/api-0.219.0
• 1f78066fce8ef8552d41fa24ca362b8c83dc1e72 Merge pull request #2154 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
• 14b6f618b008a088342948ea581340b2244a85f2 Bump go.step.sm/crypto from 0.57.0 to 0.57.1
• 9dabb19da02989a81ff65de0ae63c27496a3f0f8 Bump google.golang.org/api from 0.218.0 to 0.219.0
• cf1ef2a77dfab39389423bfa453cd637e8cd1e0c Merge pull request #2151 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
• f879d10ff7f5edff772dee64cb56f9daab073ccf Bump github.com/golang/glog from 1.2.3 to 1.2.4
• 4ff06cf1fc01d4def9bde7fde6d4c6cecba4fc28 Merge pull request #2149 from smallstep/dependabot/go_modules/google.golang.org/api-0.218.0
• b4cddb424b040affc2c8d21f119c4e35c33c443a Bump google.golang.org/api from 0.217.0 to 0.218.0
• 1df134ed8492b826262011a886894c31ef8779b8 Merge pull request #2147 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.4
• c70a072ddf8c2253a2e711b6198efbe555369d7f Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
• 58dca0f8221d948dda410a7414fd5d60ae6f1142 Merge pull request #2148 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
• b0c034479ce977fc85eeefb61b3cd0a9a81de65a Bump google.golang.org/grpc from 1.69.4 to 1.70.0
• 93cd8fc98153e9b66e98385728a298516966affc Merge pull request #2141 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
• 6b1a82d169a6e366debdf217ddb58a11aa4dd057 Merge pull request #2144 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.36.0
• 775071a54f3a35a91273f6fa569666a61d7696b5 Merge pull request #2142 from smallstep/dependabot/go_modules/google.golang.org/api-0.217.0
• 54ea865e58c29402424389d4a32ce924100e6764 Bump google.golang.org/api from 0.216.0 to 0.217.0
• 565cab261682268cbf0a7d848686b7970757bb4c Merge pull request #2143 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.3
• 78979c6221dc5d428e7a546baa1b5407a67af6d3 Bump github.com/newrelic/go-agent/v3 from 3.35.1 to 3.36.0
• 9d90fb80065b29c4a654817017337727253c6d49 Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
• a291fee64763280a797df7aa30240219057c5c51 Bump go.step.sm/crypto from 0.56.0 to 0.57.0
• a729f1fc1ea755bbddb6d708cffb46fdaebfe7ba Merge pull request #2140 from smallstep/herman/fix-download-urls
• d1cfae029242b081e5493f46ba8af0ae3ada362f Fix download URLs that were pointing to cli
• 41820c8f76f5fff3cbd08c88df7e84de29e463d2 Merge pull request #2138 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
• e76ae73c1e72aedb66dc54643221208c2ebbde1b Bump google.golang.org/grpc from 1.69.2 to 1.69.4
• c5a024992f328d8ad6e2c3712f645bf08558c013 Merge pull request #2137 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.2
• 97d1692e1d2312205f90d8b3e3305ceb0192b122 Merge pull request #2136 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
• a7f7a1549f5effb47446108e4dc152be26088db0 Bump golang.org/x/net from 0.33.0 to 0.34.0
• 7a180e4477121b16d30ec2495ad9d98880d2e6b3 Bump google.golang.org/protobuf from 1.36.1 to 1.36.2
• b1195f216d818fcfd1997341d155fd3046e5aff0 Merge pull request #2135 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
• 57b03786ee1c0913bc2a8434d287455347ee056b Merge pull request #2139 from smallstep/dependabot/go_modules/google.golang.org/api-0.216.0
• 6283fe6acc760c867da08aa92e98e85764195294 Bump google.golang.org/api from 0.214.0 to 0.216.0
• 9f50dd9030897f20afcacbf36f61feff216691c1 Bump softprops/action-gh-release from 2.2.0 to 2.2.1
• 47c08d5cf04671bf38685b78742b1d36b9427fe6 Merge pull request #2131 from smallstep/herman/unflake-request-id-integration-test
• b3fb92756fe66cdd6b19267c4718b8eb59cf9850 Add comment to requireCAServerToBeAvailable
• c2a6b5b5880356657bde0fe1b029567f04036f76 Wait till a connection to the CA host/port can be made
• cda0eec3a596fbc7c72b48ee4b576e79ecc7625a Merge pull request #2129 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.3
• 6796e4fa156635200f535eda04d79eaeff3b3914 Bump cloud.google.com/go/security from 1.18.2 to 1.18.3
• 98ddef57295692fb05af0c79550419d0b831cae4 Merge pull request #2127 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.12.0
• 1d965aad16834f44ca3c39acc66f257c6116d30b Merge pull request #2130 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.32.0
• f7cd3bad14335ee230a601bcdc5d58fc5e34d0e0 Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0
• 2dd29b19b13b437e72ac859de3218de6be7bc437 Merge pull request #2128 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.4
• 1ecf556ff1ff159873084e2b2c051badbafb5d49 Bump golang.org/x/crypto from 0.31.0 to 0.32.0
• 164f9a9b9cfc35b7220f7b5f48031b0c15390141 Bump cloud.google.com/go/longrunning from 0.6.3 to 0.6.4
• e57a3ca3807e3abbdb567ce0dcf04be2376ba402 Merge pull request #2126 from smallstep/herman/upgrade-linkedca-v0.23.0
• f4736325fa4737877baa9112a78aa7cb047ec5f0 Use github.com/smallstep/linkedca @ v0.23.0
• 3f9dc06cf5907c2b8b394a9142221841e60f15ff Merge pull request #2124 from smallstep/mariano/payloadformat
• ba9e08243ab2c40083ee763fbb463344a5084d65 Add attestation format to challenge
• 143e4846e0c14bf44149a95d057ebe12e04d600f Merge pull request #2123 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.1
• 7847e67ea3fd4448e100742e7f9fe3b6090c3924 Bump google.golang.org/protobuf from 1.36.0 to 1.36.1
• f812cf26c4b5c9f633ea579e1888d6cfa6272203 Allow storing the attestation payload (#2114)
• 232f46454cf3aaf4c3286898492ba080bcec7aaa Merge pull request #2117 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.2
• c917e97931d988e898fa6d714db6ec2bfb48c0be Bump google.golang.org/grpc from 1.69.0 to 1.69.2
• 2dce25cac75258d0c98ef96ec0653f1c1311a070 Merge pull request #2118 from smallstep/dependabot/go_modules/google.golang.org/api-0.214.0
• c70a9052e962b27953debdf61a0c39b8be5e8186 Bump google.golang.org/api from 0.212.0 to 0.214.0
• 3bf1bba33610c3b3d2834cb88393f669a3e9899a Merge pull request #2116 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.3
• 7398b4375c3c5503ea8bbaeb9ce6bb6dffeb69e4 Merge pull request #2120 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.14.1
• 45fe6ce32273c12e6cb88fc4af041782c81a157e Merge pull request #2119 from smallstep/dependabot/go_modules/github.com/smallstep/pkcs7-0.1.1
• db0377c8db10beec5917e7863a4fdefbeebb0cef Bump github.com/googleapis/gax-go/v2 from 2.14.0 to 2.14.1
• 19bcc3367fc07e015ab9b165b1bea9ae3e62c531 Bump github.com/smallstep/pkcs7
• ab422b212be377118cd9ca6341b3352b27934d03 Bump github.com/google/go-tpm from 0.9.2 to 0.9.3
• cba7add37e4d1e8a951efb490b3dee23fb158720 Merge pull request #2113 from smallstep/mariano/fix-2101
• ac5b36fee8d3d19de04ec0d7c2f29f84b3229c0e Upgrade golang.org/x/net
• 4af059b6b3c5c592c6ffdf3bb11edc690707353f Upgrade crypto with support for imported keys on YibiKey KMS
• 6938c78effaa8015f156e00ea9529ab8ff273b1d Merge pull request #2107 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.0
• 97c5e690420b723bd391e3f5cd882040788bcc87 Merge pull request #2106 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.0
• 2a528c9de109d0921becba45baf469e949b4cc85 Bump github.com/go-chi/chi/v5 from 5.1.0 to 5.2.0
• 197bcd0647b44fd721cdfb6901067f26bbf4bdcf Bump google.golang.org/grpc from 1.68.1 to 1.69.0
• ea2016bd3f52d2b018c1458bc890581d41e7076f Merge pull request #2110 from smallstep/dependabot/go_modules/google.golang.org/api-0.211.0
• a085c229f6a2811de621734f9c66a7b890c5c16a Bump google.golang.org/api from 0.210.0 to 0.211.0
• 7dbc429279dcae1bfac7a78403cd32f19f2fb1cc Merge pull request #2109 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
• 91faf6af82b32cf05e629908e7e25bc786e9e65f Merge pull request #2108 from smallstep/dependabot/go_modules/golang.org/x/net-0.32.0
• b071e0c8ad912fc4b210c98e0a4f0e485c8f729b Merge pull request #2111 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
• 1bc4eded3b2d0e02313cff55ccbaa0a1843b1fbe Bump softprops/action-gh-release from 2.1.0 to 2.2.0
• 9192369a12dfc87e90a3eba659fc1ddb72d56359 Bump golang.org/x/crypto from 0.30.0 to 0.31.0
• 397e17b3754833891548af7908d864c19596eaf1 Bump golang.org/x/net from 0.31.0 to 0.32.0
• 351287d23b2b5bac7c514c96942fff323efc4dcd Merge pull request #2104 from smallstep/mariano/wraptransport
• 98087fec306ad68ffc6efbf7ba26a42815552879 Move wrap transport initialization to constructor
• 809c7023c95fe99ba8fa89d1a2494c109b7730d7 Transport wrappers (#2103)
• c9869621549de59d075b895e7c73b5c65592623e internal/httptransport: initial implementation of the package (#2098)
• 51e253be7198f3669d3703ed7b570704202b199b Merge pull request #2097 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.5
• 4c7aa8a6233514ec1cce677c44619f66bda0c9d0 Add test case for Nebula certificate errors
• 9000271ce0c6c21b0c06c412b7fe8f44a5480a63 Fix new return value from nebula.NewCAPoolFromBytes
• f90204930e41ed45f248910745eb7b0911017250 Merge pull request #2094 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.68.1
• 7a7714fb370c85854f72b8bf9e879fa9d3408b71 Merge pull request #2096 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.30.0
• 30dd9a6c132e82deeae574171d36dec13e101ece Bump google.golang.org/grpc from 1.67.1 to 1.68.1
• 7df5f546dc8fd4b29e5b587eaf5aa6c835951e34 Bump golang.org/x/crypto from 0.29.0 to 0.30.0
• dbeedf342a883fd7932d37c72a313d48fc2e0e51 Merge pull request #2095 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
• 9f68609a85d27a7e6d2829bcff91ec61a3bbbec8 Merge pull request #2093 from smallstep/dependabot/go_modules/google.golang.org/api-0.210.0
• 43400d6ffb1e4a17f25c889ffbdcd4a256bfa234 Bump github.com/slackhq/nebula from 1.9.4 to 1.9.5
• eb1b7e090e0a4a280e2da35dd430a3c6808b22c2 Bump go.step.sm/crypto from 0.54.2 to 0.55.0
• abfcc59ae8306b1878266e7e4746e09ef19bf6b6 Bump google.golang.org/api from 0.209.0 to 0.210.0
• 6b8da39183ddc61b44dbebdacd646b6af103ebea Merge pull request #2082 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.3
• 8cffe10cecbc238a7b370b8af546a8add28f51bc Merge pull request #2084 from smallstep/dependabot/go_modules/google.golang.org/api-0.209.0
• 09b917badd8fa116fbf3f6e01aa112079946453f Merge pull request #2083 from smallstep/dependabot/go_modules/github.com/stretchr/testify-1.10.0
• e2e3f36d7798d14ada84d1568f92b2b6ea053758 Bump google.golang.org/api from 0.206.0 to 0.209.0
• 29e1811c479864cc5bb4a966cd1cc8293d1a1e3c Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
• e93d542145b5028268747ec797c7811fc38df165 Bump cloud.google.com/go/longrunning from 0.6.2 to 0.6.3
• bc1accbce132863721d1e1e99ec4ca2ca59c9c9b add go.uber.org/mock to tools.go, generate mocks using go run (#2080)

Thanks!

Those were the changes on v0.28.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.