Skip to content

Releases: smallstep/certificates

Step CA v0.22.2-rc12 (22-10-01)

01 Oct 20:18
9d4b383
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.22.2-rc12_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.22.2-rc12_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • 9d4b383 [action] updates and first pass at goreleaser deb

Thanks!

Those were the changes on v0.22.2-rc12!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.22.2-rc11 (22-10-01)

01 Oct 20:11
4eb76c1
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.22.2-rc11_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.22.2-rc11_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • 4eb76c1 [action] updates and first pass at goreleaser deb

Thanks!

Those were the changes on v0.22.2-rc11!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.22.2-rc10 (22-10-01)

01 Oct 20:02
d60d74a
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.22.2-rc10_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.22.2-rc10_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • d60d74a [action] updates and first pass at goreleaser deb

Thanks!

Those were the changes on v0.22.2-rc10!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.23.0-rc.1 (22-09-13)

13 Sep 19:45
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.23.0-rc.1_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.23.0-rc.1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • df97512 Upgrade linkedca and add entry to changelog
  • 666f695 Merge pull request #1048 from smallstep/attest-platform
  • bb0210e Fix typo in linkedca variable
  • 1e098ae Fixes ACMEAttestationFormat comment
  • 6640713 Add methods to convert attestation formats
  • 0f65179 Reject not enabled attestation formats
  • 53ad3a9 Add go workspaces files to gitignore
  • ba42aaf Add attestationFormat property in the ACME provisioner
  • b2119e9 Merge pull request #977 from smallstep/device-attestation
  • fd4e96d Rename method to IsChallengeEnabled
  • c77b4ff Fix linter errors
  • 59c5219 Use a type for acme challenges
  • a89bea7 Format comment
  • 5df9434 Fix old comment, device-attest-01 uses the acme payload
  • c5d3714 Fix acme error map
  • 08815c5 Reneame attestation statement error
  • 3cd72ac Remove debug statements
  • 55318ef Merge pull request #1043 from unreality/oidc-missing-email
  • 1b68a9f Merge pull request #1045 from smallstep/deprecation-notice
  • bc61b23 Add deprecation notices to step-x-init binaries
  • b89f210 remove fail-email test and add ok-empty-email test
  • a2749ca Merge branch 'master' into device-attestation
  • 7a03c43 allow missing Email claim in OIDC tokens, use subject when its missing
  • e75e7e7 Fix linter warnings
  • 54d9209 Validate proof of possession signature
  • 45af68b Upgrade go.step.sm/crypto
  • 59b7603 Use a clientAuth only cert for device-attest-01
  • 6db631d Upgrade go.step.sm/crypto@attest
  • ca412e7 Return error on attestation validation
  • ab5f916 Define ErrorBadAttestationStatement
  • 735c9d4 Add support for yubikey attestation
  • ebce40e Add new method ACMEClient.ValidateWithPayload
  • f1c63bc Fix challenge mapping
  • 2a44972 Run go mod tidy
  • df96b12 Add AuthorizeChallenge unit tests
  • bca311b Add acme property to enable challenges
  • ae8d4d8 Fix unit test
  • 693dc39 Merge branch 'master' into device-attestation
  • b1e9d5e Revert "Run on plaintext HTTP to support Cloud Run"
  • 2f7cb92 Use go.step.sm/crypto to set the permanent identifier
  • 21427d5 Replace instead of prepend provisioner extension
  • 2ab1e66 Fix nonce validation
  • e02a190 Merge branch 'master' into device-attestation
  • 66356cf Add attestation certificate validation for Apple devices
  • 9b9c555 Add changelog template
  • 1d10491 Update README.md
  • 274f6cc iOS 16 beta 2 support
  • 7e1b0be iOS 16 beta 1 support
  • 77c6d10 Verify key authorization is contained within the TPM quote extraData field
  • e1ec31c Implement TPM attestation statement verification
  • 2ac8b69 Add ACME permanent-identifier identifier type
  • aacd6f4 Add device-attest-01 challenge type
  • 09b9673 Run on plaintext HTTP to support Cloud Run
  • 860baeb Verbose debug logging

Thanks!

Those were the changes on v0.23.0-rc.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.22.1 (22-08-31)

31 Aug 04:14
Compare
Choose a tag to compare

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.22.1_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.22.1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • d718c69 Prepare changelog for release
  • b8162d5 Merge pull request #1034 from smallstep/fix-1033
  • a7fcfe0 Verify with roots and intermediates
  • 30c54a5 Add entry in changelog
  • ea8579f Fix bad signature algorithm on EC+RSA PKI

Thanks!

Those were the changes on v0.22.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.22.0 (22-08-26)

26 Aug 00:20
Compare
Choose a tag to compare

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.22.0_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.22.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • a893d6e Upgrade go.step.sm/cli-utils
  • 432477a Merge pull request #1030 from smallstep/herman/fix-template-validation
  • 1938b1b Merge branch 'master' into herman/fix-template-validation
  • 1d1e024 Upgrade to go.step.sm/crypto v0.18.0
  • 6b7b989 Add provisioner template validation
  • dd6f59b Merge pull request #1024 from smallstep/gosec
  • 23b8f45 Address gosec warnings
  • 713dfad Merge pull request #1019 from smallstep/head-middleware
  • 8f88740 Merge pull request #1014 from smallstep/max/dns-id
  • 6cab4d3 Add a middleware to automatically route HEAD requests to GET
  • c040e4b Add unit tests
  • 85fc837 Merge pull request #1018 from smallstep/ra-config
  • 3c88a9c Fixed changelog
  • 8e08f0d Add entries to changelog
  • 0c7467c Allow to automatically configure and linked RA
  • 5e0be92 Allow option to skip the validation of config
  • b7c2f6c Check for DNS name validity
  • ae76d94 Merge pull request #1009 from smallstep/code-ql
  • 2db15e4 Remove unnecessary log entries
  • 759aa26 Fix linter warning
  • 90d2785 Sanitize log entries in logging package
  • b62f4d1 Add lgtm comments on some security warnings
  • a5439c4 Remove ciphersuites without Lucky13 countermeasures
  • d6baad4 Merge pull request #1008 from smallstep/endpoint-id
  • 8bd0174 Rename field to IsCAServerCert
  • 5df1694 Add endpoint id for the RA certificate
  • 20784c7 Merge pull request #1006 from smallstep/max/revoke-serial-validation
  • 1dd0d7d Update bad serial error to be more specific
  • 73ba411 [action] parameterize golangci-lint version
  • eb091ae Simplify field names for ProvisionerInfo
  • a65adc0 Merge pull request #1005 from smallstep/crypto-kms
  • 7052a32 Validate revocation serial number
  • 4985ab1 Remove kms package
  • 369b8f8 Use go.step.sm/crypto/kms
  • 3e2729e Merge pull request #989 from smallstep/max/disable-ssh-hosts
  • 9f67a80 Merge pull request #1004 from smallstep/go-1.19
  • f1aabaa Use functions from os instead of io/ioutil
  • 8445c29 Change actions to build using Go 1.19
  • 99c9155 disableSSHHostsListAPI -> disableGetSSHHosts
  • 38fb924 Merge pull request #993 from smallstep/ra-ids
  • 22337da Merge pull request #990 from qbit/master
  • 821743f Upgrade newrelic to v3
  • 135c481 Update deps to bring in support for OpenBSD
  • a2f7766 Use released version of linkedca
  • c5c7c30 Fix typo in ProvisionerInfo
  • 6474456 Send RA provisioner to linkedca.
  • 6b5d3dc Add provisioner name to RA info
  • 9648fe6 Remove debug statement
  • a1f5492 Rename internal field
  • f9df8ac Remove unused interface
  • 7a1e6a0 Fix and extend stepcas unit tests
  • 9408d0f Send RA provisioner information to the CA
  • a881937 Remove empty lines on debug information
  • 87f28a7 Create codeql-analysis.yml
  • 0efaf51 Create SECURITY.md
  • fb7f57a Add attribute to disable SSH Hosts list API
  • 01423e3 [action] combine label and triage project add in one workflow

Thanks!

Those were the changes on v0.22.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.21.0 (22-07-07)

07 Jul 00:12
Compare
Choose a tag to compare

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.21.0_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.21.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • ffe7c00 Add changelog template
  • 6814b7f Update README.md
  • f140874 Merge pull request #958 from smallstep/rsa-signature-algorithm
  • 7ecb8c3 Update CHANGELOG.md
  • dab2f79 Merge pull request #960 from smallstep/uri-1.19
  • 68a89fb Split Go 1.19 problematic with build tags
  • ed778b7 Merge pull request #956 from shuLhan/kms-uri-test-go119
  • 0e7257a kms/uri: fix test on Parse for the next Go release
  • 31af1ef Sign certificates with the issuer signature algorithm
  • 34f9268 Merge pull request #954 from shuLhan/shulhan-gofmt
  • 0b748f2 Merge pull request #955 from shuLhan/cas-cloudcas-test-go119
  • ee53530 cas/cloudcas: update test on createPublicKey for the next Go release
  • fe04f93 all: reformat all go files with the next gofmt (Go 1.19)
  • 304cc5a Merge pull request #950 from gdbelvin/pinsrc
  • fed0904 pinfile

Thanks!

Those were the changes on v0.21.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.20.0 (22-05-26)

26 May 18:09
34d141e
Compare
Choose a tag to compare

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.20.0_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.20.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • 34d141e Merge pull request #945 from smallstep/changelog-update
  • 5e56a7b Changelog update for 0.20.0
  • b4b9893 Update changelog
  • 6d580a6 Update changelog
  • de00e01 Merge pull request #947 from smallstep/fix-ssh-revocation
  • 2adf8ca Fix Dependabot warning on an indirect dependency
  • 9c049ee Add revoke ssh unit test
  • ce9a23a Fix SSH certificate revocation
  • abfbbc8 Merge pull request #946 from smallstep/herman/acme-csr-padding
  • fd54628 Strip base64-url padding from ACME CSR
  • a564b4f Merge pull request #944 from smallstep/herman/tls-wasm-client
  • a7dd3a9 Set nil dial context for js/wasm runtime
  • 911cec2 Merge pull request #943 from smallstep/ssh-renew-provisioner
  • 94f5b92 Use proper context in authority package
  • 1be74ec Merge branch 'master' into ssh-renew-provisioner
  • 539bfdd Merge pull request #914 from smallstep/context-authority
  • e7f4eaf Remove explicit deprecation notice
  • 26dd97e Merge branch 'master' into context-authority
  • 02fd0e7 Merge pull request #913 from delamart/master
  • 07984a9 better error messages
  • 9ec154a rewrite and improve secret-id config
  • 6989c7f vault auth unit tests
  • 6c44291 refactor vault auth
  • dec1067 vault kubernetes auth
  • 6b3a8f2 Add provisioner to SSH renewals
  • 3c4d041 Merge pull request #941 from smallstep/ssh-provisioner
  • eebbd65 Fix linter error
  • f814807 Merge pull request #915 from smallstep/max/removing-beta
  • 5443aa0 gofmt -s
  • 8ca9442 Add -s to make fmt and bump golangci-lint to 1.45.2
  • 586e4fd Update authority/options.go
  • 1ad75a3 Skip failing test for now
  • dd985ce Clarify errors when sending renewed certificates
  • a627f21 Fix AuthorizeSSHSign tests with extra SignOption
  • e7d7eb1 Add provisioner as a signOption for SSH
  • 2935860 Store provisioner with SignSSH
  • c8d7ad7 Fix store certificates methods with new interface
  • de99c3c Report provisioner and parent on linkedca
  • 20b2c6a Extract cert storer methods from AuthDB
  • 9e05cc4 Merge pull request #940 from smallstep/herman/improve-renew-expired-cert-error
  • 479eda7 Improve error message when client renews with expired certificate
  • fff00ac Updates to issue templates
  • bfb406b Fixes for PR review
  • 14524d7 Merge pull request #938 from smallstep/herman/update-crypto-0.16.2
  • d1ab1d5 Merge branch 'master' into herman/update-crypto-0.16.2
  • 984e4fc Merge pull request #932 from smallstep/herman/pkcs7-patches
  • b75ce3a Update to go.step.sm/crypto v0.16.2
  • 400b1ec Remove scep handler after merge.
  • 898ca41 Merge branch 'master' into context-authority
  • ea084d7 Merge pull request #933 from smallstep/herman/allow-deny
  • c695b23 Fix check for admin not belonging to policy
  • 25b8d19 Couple changes in response to PR
  • d0c0733 Merge pull request #924 from vijayjt/vijayt/helmchart-kms
  • 7030dbb Use github.com/smallstep/pkcs7 fork with patches applied
  • d51913f Merge pull request #917 from smallstep/herman/scep-get
  • 8942422 Add GetID() and add authority to initial context
  • 688ae83 Add some tests for SCEP request decoding
  • c9a89d1 Merge branch 'master' into herman/scep-get
  • 1e03bbb Change types in the ACMEAdminResponder
  • f639bfc Use contexts on the new PolicyAdminResponder
  • d461918 Merge branch 'master' into context-authority
  • 65090da Merge pull request #788 from smallstep/herman/allow-deny
  • cc26a0b Explicitly disable wildcard Common Name constraint
  • 0f4ffa5 Fix linting issues
  • 7104299 Add full policy validation in API
  • 2ea0c70 Move acme context middleware to deprecated handler
  • ed231d2 Update to go.step.sm/linkedca@v0.16.1
  • 1052113 Don't rely on linkedca model stability in API response bodies
  • 5e9bce5 Unexport GetPolicy()
  • f0272dc Fix import replacement of linkedca
  • 60d8b22 Change context retrievers to MustTFromContext
  • d51c6b7 Make step handler backward compatible
  • 43ddcf2 Do not use deprecated AuthorizeSign
  • 02c0ae8 Allow KMS type to be specified in the helm chart template if specified on the command line.
  • 62d93a6 Apply base context to test of the ca package
  • 9147356 Fix linter errors
  • a8a4261 Fix authority/admin/api tests
  • 2ab7dc6 Fix acme tests.
  • ba499ee Fix acme/api tests.
  • 6f9d847 Fix panic in acme/api tests.
  • 723c4c1 Merge branch 'master' into herman/allow-deny
  • 77893ea Change authority policy to use dbPolicy model
  • 13173ec Fix SCEP GET requests
  • 4cb74e7 fix linter warnings
  • d82e51b Update AllowWildcardNames configuration name
  • d1f75f1 Refactor ACME api.
  • fddd6f7 Move linker to the acme package.
  • 55b0f72 Add context methods for the acme linker.
  • 2b7f693 Change Subject Common Name verification
  • bb8d85a Fix unit tests - work in progress
  • 42435ac Use scep authority from context
  • 688f9ce Add scep authority to context.
  • 216d8f0 Handle acme requests with the new api
  • d13537d Use context in the acme handlers.
  • 439cb81 Use admin Route function
  • 8bd4e1d Inject the acme database in the context
  • bd412c9 Add context methods for the acme database
  • 0446e82 Add context methods for the authority database
  • 00f181d Use contexts in admin api handlers
  • 623c296 Create context methods from admin database
  • 88a1bf1 Update to pull request template
  • 48e2fab Add authority.MustFromContext
  • d5070ec Use server BaseContext
  • 817af3d Fix unit tests on the api package
  • c82296b Merge pull request #910 from jschlyter/docker_hsm
  • a93653e Use api.Route instead of the caHandler.
  • a6b8e65 Retrieve the authority from the context in api methods.
  • 900a640 Enable the authority middleware in the server
  • 9628fa3 Add methods to store and retrieve an authority from the context.
  • 74a6e59 Add tests for ProtoJSON and bad proto messages
  • bddd08d Remove "proto:" prefix from bad proto JSON messages
  • 6e1f8dd Refactor policy engines into container
  • 2a76206 Fix more PR comments
  • 76112c2 Improve error creation and testing for core policy engine
  • b91affd exposing authority configuration for provisioner cli commands
  • c142542 include support for GCP and AWS KMS by default
  • df8eca2 space
  • 20f5d12 Improve test rigour for reloadPolicyEngines
  • 6264e84 Improve policy error handling code coverage
  • 3fa96eb Improve policy errors returned to client
  • 66ba604 start pcscd if installed
  • 6ee48ca add pcsc-lite
  • 221ced5 add Dockerfile for building with HSM support
  • a3c5188 Merge branch 'master' into herman/allow-deny
  • c40a4d2 Contain policy engines inside provisioner Controller
  • ef110a9 Change pointer booleans to regular boolean configuration
  • e9f5a1e Improve policy bad request handling
  • b72430f Block all APIs when using linked deployment mode
  • fb81407 Fix ACME policy comments
  • a2cfbe3 Fix (part of) PR comments
  • 3424442 Merge pull request #906 from smallstep/install-step-ra-arm5
  • a16face Merge pull request #905 from smallstep/carl/startup-msg-tweak
  • 340aa32 We now have an armv5 step-ca build; remove guard clause from RA install script
  • 97b64aa Cosmetic fix for consistency in the startup messages
  • 3eecc4f Improve test coverage for reloadPolicyEngines
  • 72bbe53 Add additional policy options
  • 9a21208 Add deduplication of policy configuration values
  • f2f9cb8 Add conditional defaults to policy protobuf request bodies
  • 6532c93 Improve read.ProtoJSON bad protobuf body error handling
  • 647538e Merge branch 'herman/allow-deny' into herman/allow-deny-options
  • ad2de16 Merge branch 'master' into herman/allow-deny
  • 7f9034d Add additional policy options
  • def9438 Improve handling of bad JSON protobuf bodies
  • 2ca5c01 Fix flaky test behavior for protobuf messages
  • ff8cb19 Fix usage of URL in generateAdminToken
  • abcad67 Merge branch 'master' into herman/allow-deny
  • 82e0033 Remove Adder options
  • 8d15a02 Fix if-else linting issue
  • 99702d3 Fix case of no authority policy existing
  • d6be945 Merge branch 'master' into herman/allow-deny
  • a9f033e Fix JSON property name for ACME policy
  • 30d5d89 Improve test coverage for Policy Admin API
  • 256fe11 Improve tests for ACME account policy
  • 0bb15e1 Fix missing ACME provisioner option
  • 9797b33 Merge branch 'master' into herman/allow-deny
  • 034b794 Merge branch 'master' into herman/allow-deny
  • 7df52db Add ACME EAB policy
  • 679e294 Disallow name constraint wildcard notation
  • 96f4c49 Improve how policy errors are returned and used
  • d8776d8 Add K8sSA SSH user policy back...
Read more

Step CA v0.19.0 (22-04-19)

19 Apr 23:36
Compare
Choose a tag to compare

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.19.0_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.19.0_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • 605a959 [action] attempt to pin goreleaser version
  • 27b3d82 [action] goamd64 another attempt at fix
  • 18ca660 [action] issue uploading to scoop - attempt setting goamd64
  • ddac3b2 Merge pull request #904 from smallstep/herman/changelogs-20220419
  • 714b5e6 Fix step -> step-ca

Thanks!

Those were the changes on v0.19.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Step CA v0.18.3-rc4 (22-04-19)

19 Apr 21:56
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.18.3-rc4_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.18.3-rc4_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • d6ce35a [action] attempt to pin goreleaser version

Thanks!

Those were the changes on v0.18.3-rc4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.