Trylle

Official Release Artifacts

Linux

OSX Darwin

Windows

📦 step-ca_windows_0.30.0-rc1_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.30.0-rc1_amd64.tar.gz.pem \
  --signature step-ca_darwin_0.30.0-rc1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.30.0-rc1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

a7ceb2d08b9d11406d8168c5d0aae098fd38a481 Merge pull request #2533 from smallstep/mariano/transport-decorator
63231db0d3023bd9eba0b1f99fa4ea22b2be4177 Apply suggestions in code review
8912afb248d4557106e5011e0ebce6c022b266f7 Merge branch 'master' into mariano/transport-decorator
f1c54b84306a7ce3a50ccdb5b43c4575d4aa7fa3 Add missing commit
da56c7077369ff50b6c4ce129999adf8a5ce35e2 Apply suggestions from code review
e86b66b8b0a191acd73e33256e13679201ce716d Add HTTP transport decorator
f088be2548472b15571d8813c9579700ac01c5c4 Merge pull request #2530 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.8.0
61b8e7216611c742badf515c48a3b20248b380a6 Bump cloud.google.com/go/longrunning from 0.7.0 to 0.8.0
a48532904f93affbcb618778cb9de530f8f73bb6 Merge pull request #2529 from smallstep/dependabot/go_modules/golang.org/x/net-0.49.0
bb8c54df2a9f9fc02266c3d0bd4e3f7e5b0a5172 Bump golang.org/x/net from 0.48.0 to 0.49.0
f4a04b8f22d837bfc694cafc564957efac9ed07f Merge pull request #2531 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.47.0
8127b3842b2238ec0d269e81db9822242defcc0a Merge pull request #2532 from smallstep/dependabot/go_modules/google.golang.org/api-0.259.0
e16cf5fa2b7418cf2a9c5c4ccc3cc1b694e1a09a Bump google.golang.org/api from 0.258.0 to 0.259.0
4c90aab288a04eefcef294b5e50ef2745a5a0cc6 Bump golang.org/x/crypto from 0.46.0 to 0.47.0
ef8d580f3f0a4a8e57fdd414f62e71db49500b7c Merge pull request #2526 from smallstep/fix-acme-db-warning-2102
7a9cfc6c4bbfe941d7ad0d3f31b3d0de742a1ac7 Merge pull request #2519 from smallstep/carl/publish-packages-workflow
21021ffe1869c6e27fdf7a31c3ef249f9bcbc85b Warn when ACME provisioner is configured without database
e9a1225e8881ea47e1525218a79d76fdb0befaf4 Merge branch 'master' into carl/publish-packages-workflow
e6c864fa1d60851cc7dd6d20e6a046c47097f3f9 Merge pull request #2525 from smallstep/herman/fix-root-not-found-tests
61bb5d66fc669e9fe2284d941ab52e704cda08b0 Merge branch 'carl/publish-packages-workflow' of ssh://github.com/smallstep/certificates into carl/publish-packages-workflow
096faa94c91303fd17ff66e69513f3c44bb54ee1 Sync with CLI version
d50d076e6d89f00c42219b15d0784f68491c9864 Merge branch 'master' into carl/publish-packages-workflow
979edbb59171d0287c38ac1d8b7d59898c417f2e Fix tests for root not found by fingerprint functionality
9b41df680f18f66ea5493369340ff55c8745591c Merge pull request #1893 from smallstep/root-not-found-error-message
77853b14320c961500c30c52444e0e6432958de1 Merge pull request #2523 from smallstep/mariano/cast
091b6a15b3cbe6023097ed4f049aa93c291f0a8c Fix linter errors
af418740ebca14a7e20c7ba6b3d0bfba6bd70c0e Merge pull request #2522 from smallstep/mariano/trixie-changelog
ac5123fb9202e40c79ff9c45b5754361ff0c62ab Move trixie changelog to new section
f71822f4da01cf2be41396c769ad57315015cc5d Merge pull request #2520 from smallstep/mariano/trixie-changelog
07d544cbcc68dd4db4b7a663cdecd6da178e44d6 Lint fixes
aeb739f255ce5d8c894d9724b122febae54c78df Add changelog entry for smallstep/certificates#2493
8a71cba80f5d0ed7e19a7ee3f6cc71c71a9d1c44 Merge pull request #2493 from smallstep/mariano/trixie
b73f8b108b46acb2f5bcbdadcd3fe4fa96c8f41e Standalone workflow to publish packages
031cc55b82cc3c231ca574b062d32d3f307f6522 Merge pull request #2517 from smallstep/herman/fix-cloudcas-scep-ra
548717c9347fcd76edc2af5a7573efd1340c02ab Wrap Google Cloud CAS root and intermediate certificate parsing errors
99e8f6c2c6d79e65908e41ff33030749808ed862 Prevent panics when instantiating SCEP authority without intermediates
cdcd89b9a50bcc656eb17d50b3807a462d11e467 Parse intermediates from Google Cloud CAS
6dd48ac4491638673ead1e7e7cf1a8f837bf1dfd Merge pull request #2515 from smallstep/mariano/renewer-iddle-connections
eb10da17b80046b92b314c51d4325ba7af4562b7 Merge pull request #2513 from originaltrini0/fix-issue-#2013
5edadf7e4a11db5bc14afbf41a47e3662df8ae65 Close idle connections on client certificate renew
2a2238476f7f131da5b298ffbc7e261c6ca24126 Fix missing version number while building step-ca
5284fbbc46e533858d88913b0444712fe62f2914 Merge pull request #2512 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.8
f349b04d10e6b639ebb409530bf691502290220b Bump github.com/google/go-tpm from 0.9.7 to 0.9.8
ccc90ca862baa9fc557f8557ca7319da3bb4e705 Merge pull request #2505 from smallstep/dependabot/go_modules/google.golang.org/api-0.258.0
9fe50b0c3b48f88666a47a74637a8d29eb0a4422 Use option.WithAuthCredentialsFile for Google API auth
cf8479df178fc4f9fb42bd628d9a4c99ddac5dc6 Bump google.golang.org/api from 0.257.0 to 0.258.0
b1da00c81170efd4427349af061f8b5bf3761398 Merge pull request #2508 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.78.0
c46e7ce99b8d568b9cb7cfde59f02fb921bb129d Bump google.golang.org/grpc from 1.77.0 to 1.78.0
2f82cb13b20343f2b7db2f27e5844f20394404b0 Merge pull request #2506 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.16.0
b3734f0b1836165c2dfe0ebec518f61d707475f4 Bump github.com/googleapis/gax-go/v2 from 2.15.0 to 2.16.0
54715c850e76f5100cc78bf8302176e61c17ddde Merge pull request #2502 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.11
e5db0c22760e19da16ffe867fa1a6a59073327c5 Bump google.golang.org/protobuf from 1.36.10 to 1.36.11
8f6304619fef50b2a897f0277ad327803f41907c Merge pull request #2503 from smallstep/dependabot/go_modules/golang.org/x/net-0.48.0
ec3698dc2d8446ed6f59bf7e8fd3e6afb1867762 Bump golang.org/x/net from 0.47.0 to 0.48.0
5398fc7653d9a3b941acef17212d86bea122b98e Merge pull request #2495 from smallstep/dependabot/go_modules/google.golang.org/api-0.257.0
9dec8fca75ff5e423bb84f56c433a66673762dfd Bump google.golang.org/api from 0.256.0 to 0.257.0
b7ff5e9441c651bd68d9ffea8522d8f6756e6be2 Merge pull request #2496 from smallstep/dependabot/go_modules/golang.org/x/sync-0.19.0
7203cbfa17b4ec04392404fb012fc7f9f859b7ff Merge pull request #2494 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.75.0
576779073e45ea673eb1708b2788a80797743c3e Bump golang.org/x/sync from 0.18.0 to 0.19.0
67276b5bcadef00f037a3eb81686346061b00a26 Bump go.step.sm/crypto from 0.74.0 to 0.75.0
5f06a51ebbfdedff08393713173c5ec87db205d1 Fix linter errors
2d6fa86a4f33e5c397d25dc122489022336c1973 Hardcode files in CMD
fa265ab889b1c155abf23fc8079012217dcac045 Add yubihsm-pkcs11
59b9262c82ebc69062c79af3d3e09cce096d1165 Update Debian version to trixie
86bea278677e79ba4ede80c8427928e5d4cc785f Merge pull request #2492 from smallstep/herman/enable-govulncheck
3e90f37689a73e96cf67bd2e04fcbcbd32f7e735 Revert "Disable govulncheck until go 1.25.5 is available in github actions (#2490)"
72285d82bcda4dad1d6cecabd97eae9d3393e951 Apply suggestions from code review
38733dab95b380157950863031f916dd7502212f api: output a more helpful error message when root is not found

Thanks!

Those were the changes on v0.30.0-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.