Step Certificates Files

Official Release Artifacts

Linux

• 📦 step-ca_linux_0.28.0_amd64.tar.gz
• 📦 step-ca_0.28.0_amd64.deb

OSX Darwin

• 📦 step-ca_darwin_0.28.0_amd64.tar.gz
• 📦 step-ca_darwin_0.28.0_arm64.tar.gz

Windows

• 📦 step-ca_windows_0.28.0_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate step-ca_darwin_0.28.0_amd64.tar.gz.sig.pem \
  --signature step-ca_darwin_0.28.0_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

• [df13aa] Update changelog for v0.28.0 (#2051)
• [77667e] Merge pull request [#2049] from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.2
• [5147c6] Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
• [efd324] Merge pull request [#2048] from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.2
• [a51f67] Merge pull request [#2047] from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.1
• [9943bf] Merge pull request [#2050] from smallstep/dependabot/go_modules/google.golang.org/api-0.203.0
• [bb8605] Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner (#2045)
• [95a6ca] Bump google.golang.org/api from 0.201.0 to 0.203.0
• [99baf6] Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
• [bfe436] Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
• [34ba7a] Merge pull request [#2046] from smallstep/herman/refactor-cli-utils-import
• [b45b73] Use github.com/smallstep/cli-utils instead of go.step.sm/cli-utils
• [88443d] Use dnsNamesSubsetValidator for IID provisioners (#2044)
• [946bba] Merge pull request [#2040] from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.5
• [61fb5f] Merge pull request [#2039] from smallstep/dependabot/go_modules/google.golang.org/api-0.201.0
• [5afe6b] Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
• [6ce8f7] Bump google.golang.org/api from 0.200.0 to 0.201.0

Thanks!

Those were the changes on v0.28.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.