Official Release Artifacts

Linux

• 📦 step-ca_linux_0.30.0-rc6_amd64.tar.gz
• 📦 step-ca_0.30.0.rc6-1_amd64.deb
• 📦 step-ca-0.30.0.rc6-1.x86_64.rpm
• 📦 step-ca_0.30.0.rc6-1_arm64.deb
• 📦 step-ca-0.30.0.rc6-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.30.0-rc6_amd64.tar.gz
• 📦 step-ca_darwin_0.30.0-rc6_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.30.0-rc6_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle step-ca_darwin_0.30.0-rc6_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.30.0-rc6_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 4e8d695f60af0fb731b294e62542e7742f4b74e6 Fix release workflow permissions for CI reusable workflow call
• c14008e5ad73d2b920411deabcd07b14f9828165 Fix the test for CRL disposition (#2599)
• 10cd5c20c510c14dd4e6a4a3a68a2e7e69cc7489 Merge pull request #2537 from filimonic/crl-fix-crl-file-extension
• 6f1a2286f3bcd67729acbce8ffba75db30efed25 Merge pull request #2594 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.18.0
• 386b5b12b4c0c32348dd264712383f0860e6ce01 Bump github.com/googleapis/gax-go/v2 from 2.17.0 to 2.18.0
• 9785fc81e125c23c8a483f6f91cee862c42e9279 Merge pull request #2595 from smallstep/dependabot/go_modules/golang.org/x/net-0.52.0
• 843711c471776ebc268fecc453bada74ff2d7a0c Bump golang.org/x/net from 0.51.0 to 0.52.0
• ac828ee7d0c6d8ab07d9ba2f8ad5741cc5952f09 Merge pull request #2596 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.49.0
• a25b1d101ee13086ca2c2c7cfe4278e562c63182 Merge pull request #2597 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.6.1
• 62f536890badb8cfd33458da154a2ec20e3623ee Bump softprops/action-gh-release from 2.5.0 to 2.6.1
• fd76f00407542c6e1aaada430fe9fe6c53c414c2 Bump golang.org/x/crypto from 0.48.0 to 0.49.0
• 455e3e7e0602c4f67b6054dfc7bf3fc2ec26f6ce crl: crl filename in der format should have .crl extension

Thanks!

Those were the changes on v0.30.0-rc6!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.