certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

APACHE-2.0 License

Stars
6.1K
Committers
79

Bot releases are visible (Hide)

certificates - Step CA v0.17.6 (21-10-20)

Published by github-actions[bot] almost 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.6_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.6_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

da3c6af changelog update

Thanks!

Those were the changes on v0.17.6!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Step CA v0.17.6-rc2 (21-10-20)

Published by github-actions[bot] almost 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.6-rc2_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.6-rc2_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

5c71e8a [action] replace goreleaser complicated build targets with 'targets'
12b32b0 Changelog update for v0.17.5

Thanks!

Those were the changes on v0.17.6-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Release v0.17.5

Published by github-actions[bot] almost 3 years ago

certificates - Step CA v0.17.5-rc1 (21-10-12)

Published by github-actions[bot] about 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.5-rc1_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.5-rc1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

02d6018 [action] Simply goreleaser targets
04fe312 Merge pull request #720 from smallstep/max/lint
bdc9ffb changelog update
5fc24c6 Fix a few more linter warnings and remove GOFLAGS from make lint
933b40a Introduce gocritic linter and address warnings
9cb1f21 Merge pull request #719 from smallstep/ui-windows
205148a Fix exit after defer.
48549bf Initialize windows terminal on all binaries.
896fd5e Merge pull request #715 from smallstep/template-vars
9fb6df3 Fix ssh template variables when CA is injected using options.

Thanks!

Those were the changes on v0.17.5-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Step CA v0.17.4 (21-09-28)

Published by github-actions[bot] about 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.4_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.4_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

afe1980 changelog update for 0.17.4
4a899fb Merge pull request #714 from smallstep/host-or-user-only-ssh-ca
42e2635 Add entry in changelog.
aedd7fc Be able to start a SSH host or SSH user only CA
3f44dae Merge pull request #713 from smallstep/max/release

Thanks!

Those were the changes on v0.17.4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Step CA v0.17.4-rc1 (21-09-27)

Published by github-actions[bot] about 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.4-rc1_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.4-rc1_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

6aaa785 [action] update release URLs in header
ba17869 changelog update for 0.17.3

Thanks!

Those were the changes on v0.17.4-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Step CA v0.17.3 (21-09-24)

Published by github-actions[bot] about 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below.
And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.3_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.3_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

28bd2ef Merge pull request #711 from smallstep/oidc-admin-group
963eaf8 Fix line in changelog
9eb7577 Add line to changelog.
a50654b Check for admins in both emails and groups.
7f00cc7 Clarify changelog feature.
2ae6b42 Add missing feature to the changelog.
2cf4127 Merge pull request #710 from smallstep/upgrade-go-jose
ad82d8a Upgrade go.step.sm/crypto as long with go-jose.v2
2d5bfd3 fix comment
04784be Update [email protected]
845fa07 Merge pull request #708 from smallstep/helm-fix
4fde7b5 Use badgerv2 the default in helm too.
ebf1afa Merge pull request #707 from smallstep/password-flags
cfe08ad Add flags to usage.
6729c79 Add support for setting individual password for ssh and tls keys
8df9f62 go mod tidy
4daef5d Merge pull request #703 from hslatman/hs/update-pkcs7
73d0a11 Update github.com/micromdm/scep/v2
611859e Update go.mozilla.org/pkcs7
e3acea9 Add release page link to install docs
23add69 Merge pull request #702 from smallstep/max/release-header

Thanks!

Those were the changes on v0.17.3!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Step CA v0.17.3-rc9 (21-09-13)

Published by github-actions[bot] about 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures see the Assets section below.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.3-rc9_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.3-rc9_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

6d644dd [action] goreleaser pkg link cli -> certificates

Thanks!

Those were the changes on v0.17.3-rc9!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Step CA v0.17.3-rc8 (21-09-11)

Published by github-actions[bot] about 3 years ago

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures see the Assets section below.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  -key https://raw.githubusercontent.com/smallstep/certificates/master/cosign.pub \
  -signature ~/Downloads/step-ca_darwin_0.17.3-rc8_amd64.tar.gz.sig
  ~/Downloads/step-ca_darwin_0.17.3-rc8_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

fcf3220 [action] goreleaser github release footer fix missing close braces

Thanks!

Those were the changes on v0.17.3-rc8!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

certificates - Release v0.17.3-rc7

Published by github-actions[bot] about 3 years ago

certificates - v0.17.3-rc6

Published by github-actions[bot] about 3 years ago

Changelog

9ed84d7 [action] Add .releases to .gitignore

certificates - v0.17.3-rc5

Published by github-actions[bot] about 3 years ago

Changelog

9641354 [action] tmate debugger

certificates - v0.17.3-rc4

Published by github-actions[bot] about 3 years ago

Changelog

9df5cc4 [action] remove duplicate debian step

certificates - v0.17.3-rc3

Published by github-actions[bot] about 3 years ago

Changelog

23d3232 Changelog updates
8ba9013 gofmt linting errors

certificates - v0.17.3-rc1

Published by github-actions[bot] about 3 years ago

Changelog

e73612d [action] sign and push sigs for multi-arch docker containers w/ cosign
cb2c24f Merge pull request #691 from smallstep/0.17.1-rn
12153c9 update changelog

certificates - v0.17.2

Published by github-actions[bot] about 3 years ago

Changelog

9676222 changelog update for 0.17.2
72e365a Merge pull request #690 from smallstep/max/cosign
bcc6ed9 Merge pull request #689 from smallstep/azure-oidc
f919535 Add an extra way to distinguish Azure and Azure OIDC tokens.
097a918 Fix tests when we create re-use a token with a new authority.

certificates - v0.17.2-rc1

Published by github-actions[bot] about 3 years ago

Changelog

d6203eb [action] use cosign to sign over goreleaser artifacts
08115f5 Merge pull request #687 from smallstep/max/golangci-bump
6ec8a1f Bump golangci-lint to latest

certificates - v0.17.1

Published by github-actions[bot] about 3 years ago

Changelog

9e7a3cd Update go.step.sm/crypto
af41ef1 Merge pull request #683 from smallstep/imds-versions
470b546 Merge pull request #557 from joejulian/http01-isv
40e77f6 Initialize required variables on GetIdentityToken
352acf8 Upgrade golang.org/x/crypto
8acce7b Merge pull request #682 from smallstep/helm-ssh
8cb62b6 Fix ssh in helm chart values.
0369151 use InsecureSkipVerify for validation

certificates - v0.17.0

Published by github-actions[bot] about 3 years ago

Changelog

c43d036 Merge pull request #680 from smallstep/identity-cert-lifetime
833d28c Clone the certificate in case we need to look at it later.
9e57e4d Merge pull request #633 from smallstep/linkedca
2c5080a go mod tidy
42fde8b Merge branch 'master' into linkedca
516b74f Add comment about unused code.
ff25f49 Fix comment.
3d14189 Remove extra space.
e12f6fc Complete phrase in step-ca export help.
61b8bfd Fix comment typos.
568fce2 Enforce identity cert to match ssh cert on renewals.
b1f5958 Update message to align with UI.
e3ef4a7 Update test with default tls options.
da28025 Use Default min version if not specified.
456ffd8 Use linkedca v0.5.0
66f6c73 Update badger driver to use v2 by default.
492ff4b Ask for the first provisioner password if none is provided.
28e882c Add deployment type to export.
072ba42 Add deployment type to config.
56bb3eb Add next steps for linked ca.
47a30f1 Add JWK provisioner to generic config.
536536c Wrap json errors.
640f523 Remove unused function.
9d51c2c Fix linter errors in the name of export methods.
16d3afb Remove unused method.
d72fa95 Remove debug statements.
3f07eb5 Implement revocation using linkedca.
81004ce Remove deprecated functions.
f643af7 Update onboarding flow with new pki package.
79cf059 Remove deprecated methods and write all pki files at once.
ad4dbd6 Write all files on save.
50f7a0d Work in progress implementation of PKI with helm support
798b90c Move linkedca configuration to the main package.
de719eb Add an option to avoid password prompts on step cas
de292fb Use branch version of linkedca.
7214592 Make pki initialization more flexible.
384be6e Do not show provisioners if they are not required.
b0e0f2b Use linkedca GetAdmin and GetProvisioner.
91a369f Automatically enable admin properly on linked cas.
26122a2 Enable admin automatically if a token is provided.
5344f42 Allow to use the environment variable STEP_CA_TOKEN
2620c38 Add is converting provisioners to linkedca.
e62d798 Do not store password on exports.
ac363d7 Add --password-file and --issuer-password-file flags to export.
4f27f4b Change default ciphersuites to newer names.
07f7316 Add bastion to export.
0730a16 Add collection of files and authority template.
c7f8516 Add to export all the information in the ca.json
887423e Update TLS cipher suites.
dc1ec18 Create a way to export ca configurations.
d0c1530 Remove replace of linkedca package.
3a00b6b Properly marshal a certificate when we send it to linkedca.
4ad82a2 Check linkedca for revocation.
f7542a5 Move check of ssh revocation from provisioner to the authority.
71f8019 Store x509 and ssh certificates on linkedca if enabled.
17eef81 Remove linkerd replace.
a72eab9 Use linkedca v0.1.0
7c0faab Remove now unused step-ca login.
8fb5340 Use a token at start time to configure linkedca.
dd9850c Add working implementation of the linkedca.
49c1427 Use authorityId instead of authorityID.
f7e09af Implement the login command.

certificates - v0.17.0-rc1

Published by github-actions[bot] about 3 years ago

Changelog

c43d036 Merge pull request #680 from smallstep/identity-cert-lifetime
833d28c Clone the certificate in case we need to look at it later.
9e57e4d Merge pull request #633 from smallstep/linkedca
2c5080a go mod tidy
42fde8b Merge branch 'master' into linkedca
516b74f Add comment about unused code.
ff25f49 Fix comment.
3d14189 Remove extra space.
e12f6fc Complete phrase in step-ca export help.
61b8bfd Fix comment typos.
568fce2 Enforce identity cert to match ssh cert on renewals.
b1f5958 Update message to align with UI.
e3ef4a7 Update test with default tls options.
da28025 Use Default min version if not specified.
456ffd8 Use linkedca v0.5.0
66f6c73 Update badger driver to use v2 by default.
492ff4b Ask for the first provisioner password if none is provided.
28e882c Add deployment type to export.
072ba42 Add deployment type to config.
56bb3eb Add next steps for linked ca.
47a30f1 Add JWK provisioner to generic config.
536536c Wrap json errors.
640f523 Remove unused function.
9d51c2c Fix linter errors in the name of export methods.
16d3afb Remove unused method.
d72fa95 Remove debug statements.
3f07eb5 Implement revocation using linkedca.
81004ce Remove deprecated functions.
f643af7 Update onboarding flow with new pki package.
79cf059 Remove deprecated methods and write all pki files at once.
ad4dbd6 Write all files on save.
50f7a0d Work in progress implementation of PKI with helm support
798b90c Move linkedca configuration to the main package.
de719eb Add an option to avoid password prompts on step cas
de292fb Use branch version of linkedca.
7214592 Make pki initialization more flexible.
384be6e Do not show provisioners if they are not required.
b0e0f2b Use linkedca GetAdmin and GetProvisioner.
91a369f Automatically enable admin properly on linked cas.
26122a2 Enable admin automatically if a token is provided.
5344f42 Allow to use the environment variable STEP_CA_TOKEN
2620c38 Add is converting provisioners to linkedca.
e62d798 Do not store password on exports.
ac363d7 Add --password-file and --issuer-password-file flags to export.
4f27f4b Change default ciphersuites to newer names.
07f7316 Add bastion to export.
0730a16 Add collection of files and authority template.
c7f8516 Add to export all the information in the ca.json
887423e Update TLS cipher suites.
dc1ec18 Create a way to export ca configurations.
d0c1530 Remove replace of linkedca package.
3a00b6b Properly marshal a certificate when we send it to linkedca.
4ad82a2 Check linkedca for revocation.
f7542a5 Move check of ssh revocation from provisioner to the authority.
71f8019 Store x509 and ssh certificates on linkedca if enabled.
17eef81 Remove linkerd replace.
a72eab9 Use linkedca v0.1.0
7c0faab Remove now unused step-ca login.
8fb5340 Use a token at start time to configure linkedca.
dd9850c Add working implementation of the linkedca.
49c1427 Use authorityId instead of authorityID.
f7e09af Implement the login command.