Step CLI v0.28.7-rc3 (25-06-05)

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

• 📦 step_linux_0.28.7-rc3_amd64.tar.gz
• 📦 step_linux_0.28.7-rc3_arm64.tar.gz
• 📦 step_linux_0.28.7-rc3_armv7.tar.gz
• 📦 step-cli_0.28.7.rc3-1_amd64.deb
• 📦 step-cli-0.28.7.rc3-1.x86_64.rpm
• 📦 step-cli_0.28.7.rc3-1_arm64.deb
• 📦 step-cli-0.28.7.rc3-1.aarch64.rpm
• see Assets below for more builds

macOS Darwin

• 📦 step_darwin_0.28.7-rc3_amd64.tar.gz
• 📦 step_darwin_0.28.7-rc3_arm64.tar.gz

Windows

• 📦 step_windows_0.28.7-rc3_amd64.zip
• 📦 step_windows_0.28.7-rc3_arm64.zip

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.7-rc3_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.7-rc3_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.7-rc3_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• f90649e Merge pull request #1434 from smallstep/herman/fix-windows-ssh-config-path
• d414692 Ensure HOMEDRIVE is used when locating SSH config file location
• 7d7a8ed Merge pull request #1425 from smallstep/dependabot/go_modules/github.com/pquerna/otp-1.5.0
• 271f010 Bump github.com/pquerna/otp from 1.4.0 to 1.5.0
• 2a11114 Merge pull request #1431 from smallstep/mariano/csr-templates
• 931ba5f Update go.step.sm/crypto with template improvements

Thanks!

Those were the changes on v0.28.7-rc3!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.