Official Release Artifacts

Linux

• 📦 step-ca_linux_0.30.2_amd64.tar.gz
• 📦 step-ca_0.30.2-1_amd64.deb
• 📦 step-ca-0.30.2-1.x86_64.rpm
• 📦 step-ca_0.30.2-1_arm64.deb
• 📦 step-ca-0.30.2-1.aarch64.rpm

OSX Darwin

• 📦 step-ca_darwin_0.30.2_amd64.tar.gz
• 📦 step-ca_darwin_0.30.2_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.30.2_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle step-ca_darwin_0.30.2_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.30.2_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• 6e8ec61405239cf3f37b2bbf260a587b7d2e4e31 Merge pull request #2606 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.3
• 90b84cdf15ca2f998129c859e227f3b0fcd7d732 Bump google.golang.org/grpc from 1.79.2 to 1.79.3

Thanks!

Those were the changes on v0.30.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.