Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.3-rc1_amd64.tar.gz
• 📦 step-ca_0.28.3.rc1-1_amd64.deb
• 📦 step-ca-0.28.3.rc1-1.x86_64.rpm
• 📦 step-ca_0.28.3.rc1-1_arm64.deb
• 📦 step-ca-0.28.3.rc1-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.28.3-rc1_amd64.tar.gz
• 📦 step-ca_darwin_0.28.3-rc1_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.3-rc1_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.3-rc1_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.3-rc1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.3-rc1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• dfdb7795b41a19772acb0cd9856ddb93a0391f77 Changelog for v0.28.3 (#2215)
• d17e2c586d61ff5ae402930478d872ab7b8489a8 Merge pull request #2214 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.6.0
• 4865fdb85c262db33eab462f7aef5a4f66cd9d18 Bump github.com/ccoveille/go-safecast from 1.5.0 to 1.6.0
• ac9048d6b1bc95cf92b47019ac42509e6d9ddfdb Merge pull request #2212 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.4
• 450a35037bb21f9af9d0b508b7af831ff66a2e09 Bump cloud.google.com/go/security from 1.18.3 to 1.18.4
• 7afff07965487b4dd2e7cbea0674039db9e8e533 Merge pull request #2213 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.13.0
• fa6fd96636eea8efd062fd36a24f0d8e93addb88 Merge pull request #2210 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.6
• 67aadedf2f3251c4410ae42971c0cd3d9404d67b Bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0
• 9b7e611e56b3736a34394db4c416021d25582d46 Bump cloud.google.com/go/longrunning from 0.6.5 to 0.6.6
• 6ce27d3fdbfe2eacc25e48a52267a50579bb93b3 Merge pull request #2205 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
• e26f89170f04e270e03eaa5d5f5104fee3701177 Bump golang.org/x/net from 0.35.0 to 0.37.0
• 0cae1f7504fd2573f2c36d8e02bc988334ee74e5 Merge pull request #2202 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
• 8e5db6a0b76704628d101e377c08f818a3793baf Merge pull request #2203 from smallstep/dependabot/go_modules/google.golang.org/api-0.224.0
• 02197adddef78dbae9e7179c9089e210e0f9606e Bump go.step.sm/crypto from 0.59.0 to 0.59.1
• c3f6a177b2fc80adc4b096ecf1cc677b902d8be3 Bump google.golang.org/api from 0.223.0 to 0.224.0
• ed2c62d242de7fe2f66b171c0909754b4fb78f29 Merge pull request #2204 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.21.1
• 4d44e8c64eb6880b3777e9addb0ce393099b4786 Merge pull request #2206 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.5
• 0644a502383bdb53350cf80d0d5612297304ccbe Bump cloud.google.com/go/longrunning from 0.6.4 to 0.6.5
• 32178ed85e38c139f130bcc63d53b57a7471b98a Bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1
• 9b241ec441db6ad6442d034d778888e0e9226e1d Merge pull request #2196 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
• f289a00fd5aeecbf84c2e41460dd31f7404aeece Bump go.step.sm/crypto from 0.58.0 to 0.59.0
• e782f36a09767e62d4ee367494911f4d979081d6 Merge pull request #2197 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.35.0
• b3c3d897a749c672f69858902771fe7e60810cf7 Bump golang.org/x/crypto from 0.34.0 to 0.35.0
• bfc8b0c9b57cbebcac03213217212043e3e687d2 Merge pull request #2195 from smallstep/dependabot/go_modules/google.golang.org/api-0.223.0
• 69eca5c591bac3ecac7dccbf8cb4865f2bd96bdf Merge pull request #2194 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
• 7ae7157b616abfb70f1a75e94dff6bba4153a708 Merge pull request #2198 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.37.0
• cfc43f83fb209fb30ddb629bb7d013412386dc93 Bump github.com/newrelic/go-agent/v3 from 3.36.0 to 3.37.0
• ad635f9bdb159cc0beaccb370143a2ce91c36051 Bump google.golang.org/api from 0.222.0 to 0.223.0
• 4523a139e0be424f0f3140c445f1758762e9e68d Bump github.com/smallstep/cli-utils from 0.11.0 to 0.12.1
• 1ef0e4b1e105fbda8ae3102841911bf4838fbad0 Merge pull request #2192 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
• 3f840bdc1322abc1744a1810942ec8501513ab02 Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
• b5d7f5961d24448c7a107f9a9742205fdaebbf19 Merge pull request #2190 from smallstep/herman/fix-cast-test-32bit
• 86090128b19ee3085f53aac047d31425486aa333 Fix cast package tests on linux/arm32
• 7efdfe52867fd13c9672c3faf4339dbfd9607845 Merge pull request #2189 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• c22889db86841f38236a3fd431b38ee8d3268b87 Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
• b02df4fdd41272c97cedb66fce37ea4633d10cd8 Merge pull request #2188 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.11.0
• c3f701f452af0e614188e0bef0f1796aaf88943c Merge pull request #2184 from smallstep/dependabot/go_modules/google.golang.org/api-0.222.0
• e9dbc98e5eca73fa5bd3b547ccfeaa54077a5f94 Bump github.com/smallstep/cli-utils from 0.10.0 to 0.11.0
• 8b6b97308b55f51a0d947ac4b62cbd7d0af780b1 Bump google.golang.org/api from 0.221.0 to 0.222.0
• 37ee5180934939be1fc1934a1bc5c8af05aee813 Merge pull request #2187 from smallstep/herman/fix-ci
• 3c4af2e75380b3f4bc8f6bc0ac2c5d1af7f89886 Use Go 1.23.6 and run go mod tidy
• 87fe3c10274b054c58df34fdb49b6c4ed572e472 Bump golang.org/x/crypto from 0.33.0 to 0.34.0
• b077a1981ce11ba7154f8b7e1563a6603733f0f6 Merge pull request #2183 from smallstep/dependabot/go_modules/github.com/google/go-cmp-0.7.0
• 0979b307aee1a366e7844435db4087742670e029 Merge pull request #2182 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.21.0
• 1f43c3dfa3599c36fc14da2b9d88e0ca51af56d0 Merge pull request #2186 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
• f30913cd1fece256f49a7a67c0a07cf1f00250e8 Bump go.step.sm/crypto from 0.57.1 to 0.58.0
• 64bfbfd95c390348d611318b7818462c165010cd Bump github.com/google/go-cmp from 0.6.0 to 0.7.0
• aec4c80e374ebad028c99a51b613e19e568630a8 Bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0

Thanks!

Those were the changes on v0.28.3-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.