Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/autocert_linux_0.20.6_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/autocert_linux0.20.6_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 31cf68a Merge pull request #439 from smallstep/max/certificates-0.30.2
• 03467ef Update certificate to v0.30.2
• 4c328e6 Merge pull request #438 from smallstep/max/dependabot
• 555d858 Group Dependabot updates to reduce PR noise

Thanks!

Those were the changes on v0.20.6!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.6 (26-03-23) Latest

Latest

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/autocert_linux_0.20.5_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/autocert_linux0.20.5_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 27724ef Merge pull request #437 from smallstep/max/certificates-v0.30.1
• b0ac901 Update certificates to v0.30.1
• 857c451 Merge pull request #436 from smallstep/max/fix-release-ci-permissions

Thanks!

Those were the changes on v0.20.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.5 (26-03-19)

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/autocert_linux_0.20.5-rc2_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/autocert_linux0.20.5-rc2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 2c635ba Grant CI job required permissions in release workflow
• 4942f88 Merge pull request #426 from smallstep/dependabot/go_modules/k8s.io/api-0.36.0-alpha.1
• 31ab85a build(deps): bump k8s.io/api from 0.35.0-alpha.0 to 0.36.0-alpha.1
• 9c02102 Merge pull request #435 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.3
• 422c0ca build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3
• cbe8729 Merge pull request #434 from smallstep/max/certificates-v0.30.0
• 0b67c0e Fix lint warnings across controller and examples
• d58f6a5 go mod tidy
• e9aaadb Merge branch 'master' into max/certificates-v0.30.0
• 4fdbed6 Merge pull request #424 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.10.3
• 4bf975a build(deps): bump github.com/slackhq/nebula from 1.9.7 to 1.10.3
• 6d842cd Merge pull request #428 from smallstep/dependabot/go_modules/golang.org/x/net-0.50.0
• 56c4c2c Merge pull request #429 from smallstep/dependabot/go_modules/filippo.io/edwards25519-1.1.1
• 0388cbe ci: Enable zizmor GitHub Advanced Security upload (#432)
• ba71de0 Merge pull request #433 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.6.1
• 9bf690b Update certificates to v0.30.0
• 9204b3a build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1
• 8e53541 Add actionci.yml (#431)
• 0fff58a Merge pull request #430 from smallstep/carl/cicd-security-hardening
• 8e4f3c0 Add least-privilege permissions to triage workflow
• 2af649b build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0
• 9b85295 Merge pull request #427 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.1
• 5a62e72 build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1
• 490348c build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1
• 0950fd1 Merge pull request #423 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.76.0
• e505cbe build(deps): bump go.step.sm/crypto from 0.75.0 to 0.76.0
• 86d0525 Merge pull request #422 from smallstep/mariano/cosign
• 8aaaebe Update header with cosign instructions

Thanks!

Those were the changes on v0.20.5-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.5-rc2 (26-03-19) Pre-release

Pre-release

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.5-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.5-rc1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.5-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 1b3565e Update cosign command
• b813206 Merge pull request #421 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.9.4
• 8568712 build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4
• c501e42 Merge pull request #420 from smallstep/dependabot/go_modules/golang.org/x/net-0.49.0
• 69a6cb2 build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0
• 6e4c3d4 Merge pull request #419 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.78.0
• 813c2dd build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0
• e8e4367 Merge pull request #418 from smallstep/dependabot/go_modules/golang.org/x/net-0.48.0
• f8a853b build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0
• c74e086 Merge pull request #415 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.75.0
• b604cb5 Merge pull request #417 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
• 21c352b build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
• 3379439 build(deps): bump go.step.sm/crypto from 0.74.0 to 0.75.0

Thanks!

Those were the changes on v0.20.5-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.5-rc1 (26-01-22) Pre-release

Pre-release

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.4_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.4_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.4_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• a0fb1a5 Merge pull request #413 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.29.0
• 4ffb6b0 build(deps): bump github.com/smallstep/certificates

Thanks!

Those were the changes on v0.20.4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.4 (25-12-03)

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.3_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.3_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.3_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• e51d243 Merge pull request #408 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
• 42712a5 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0
• c91b949 Merge pull request #410 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
• 1f30d8f build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0
• 8460f84 Merge pull request #405 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
• 062aa5b build(deps): bump go.step.sm/crypto from 0.73.0 to 0.74.0
• e4b2eba Merge pull request #407 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
• 47add74 build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2
• d6abd57 Merge pull request #403 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
• 4dda1bc build(deps): bump go.step.sm/crypto from 0.70.0 to 0.73.0
• 6a1550d Merge pull request #400 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.7
• 7898fd6 build(deps): bump github.com/slackhq/nebula from 1.9.5 to 1.9.7
• 6e8ee42 Merge pull request #399 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.2
• 15f66f5 build(deps): bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
• 6cc12d0 Merge pull request #397 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.1
• 30f362d Merge pull request #393 from smallstep/dependabot/go_modules/golang.org/x/net-0.46.0
• e065157 build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0
• 67d6af7 Merge pull request #396 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.76.0
• e069a12 build(deps): bump softprops/action-gh-release from 2.3.4 to 2.4.1
• 3ca773c build(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0
• 2a3e211 Merge pull request #392 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.4
• 2b93af4 build(deps): bump softprops/action-gh-release from 2.3.3 to 2.3.4
• af6e0c3 Merge pull request #391 from smallstep/dependabot/go_modules/golang.org/x/net-0.44.0
• 24aa2d1 build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0
• 4b6baf8 Merge pull request #390 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.75.1
• abc3ae1 build(deps): bump google.golang.org/grpc from 1.75.0 to 1.75.1
• 9e1f602 Merge pull request #389 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.3
• 45dfbfa build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3
• 26f1a2a Merge pull request #383 from smallstep/dependabot/go_modules/k8s.io/api-0.35.0-alpha.0
• c16eade build(deps): bump k8s.io/api from 0.33.0-alpha.2 to 0.35.0-alpha.0
• 52d2243 Merge pull request #384 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.35.0-alpha.0
• 4f926e0 Merge pull request #388 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.70.0
• 3d70876 build(deps): bump k8s.io/apimachinery
• 9f5e88b build(deps): bump go.step.sm/crypto from 0.69.0 to 0.70.0
• a2f8b6b Merge pull request #387 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.75.0
• 7614120 build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0
• afac7f5 Merge pull request #385 from smallstep/dependabot/go_modules/golang.org/x/net-0.43.0
• fb660e5 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
• 1841ae6 Merge pull request #386 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.69.0
• cfa8936 build(deps): bump go.step.sm/crypto from 0.68.0 to 0.69.0
• ca611a3 Merge pull request #382 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.68.0
• 9db9fe9 build(deps): bump go.step.sm/crypto from 0.67.0 to 0.68.0
• 9597ce0 Merge pull request #380 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.74.2
• 9a1ba4e Merge pull request #381 from smallstep/dependabot/go_modules/sigs.k8s.io/yaml-1.6.0
• 1650195 build(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0
• 65e7309 build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
• ce3ffdb Merge pull request #377 from smallstep/dependabot/go_modules/golang.org/x/net-0.42.0
• 90d5cc8 build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0
• e1a7aea Merge pull request #374 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.4
• 3fd7946 build(deps): bump github.com/smallstep/certificates
• 35883f6 Merge pull request #371 from smallstep/dependabot/go_modules/sigs.k8s.io/yaml-1.5.0
• 7075216 build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0

Thanks!

Those were the changes on v0.20.3!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.3 (25-12-03)

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.2_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.2_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 4fec122 Merge pull request #367 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.2
• 48c57cb Merge pull request #370 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.67.0
• 6677eb9 build(deps): bump go.step.sm/crypto from 0.66.0 to 0.67.0
• 8952d7e build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2
• 226c87d Merge pull request #366 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.2
• fda2040 build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2
• 929460d Merge pull request #364 from smallstep/dependabot/go_modules/golang.org/x/net-0.41.0
• 22ec0e7 build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0
• 5f684e2 Merge pull request #365 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.73.0
• c4a8f5d build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0
• 00ece25 Merge pull request #363 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.66.0
• 6f1a454 build(deps): bump go.step.sm/crypto from 0.64.0 to 0.66.0
• 78d294d Merge pull request #362 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.2
• f21cfb0 build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2
• e964ef4 Merge pull request #360 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.64.0
• 8f08392 build(deps): bump go.step.sm/crypto from 0.63.0 to 0.64.0
• 2644499 Merge pull request #359 from smallstep/herman/fix-example-linting-issues
• 96fc385 Fix linting issues in examples
• afe2f67 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1
• 5971033 Merge pull request #357 from smallstep/dependabot/go_modules/golang.org/x/net-0.40.0
• dee9d06 build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0
• 74a013b Merge pull request #356 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.63.0
• 8796f4d build(deps): bump go.step.sm/crypto from 0.61.0 to 0.63.0
• fd73e22 Merge pull request #355 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.0
• f4143f7 build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
• 365e0be Merge pull request #353 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.61.0
• 0a248ce Merge pull request #354 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.2
• 8c8c586 build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2
• e12ea5e build(deps): bump go.step.sm/crypto from 0.60.0 to 0.61.0
• aa9a8af Merge pull request #350 from smallstep/dependabot/go_modules/golang.org/x/net-0.39.0
• 157860f build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0
• 2af9637 Merge pull request #349 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.1
• 341d723 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
• 283d1d2 Merge pull request #348 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.60.0
• f3c2e66 build(deps): bump go.step.sm/crypto from 0.59.1 to 0.60.0
• 0ed792c Merge pull request #347 from smallstep/dependabot/go_modules/golang.org/x/net-0.38.0
• a4cb288 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
• e0e1f05 Merge pull request #346 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.3
• 86c0f66 build(deps): bump github.com/smallstep/certificates

Thanks!

Those were the changes on v0.20.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.2 (25-07-14)

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.2-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.2-rc1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.2-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 19e53f7 empty commit
• 4fec122 Merge pull request #367 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.2
• 48c57cb Merge pull request #370 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.67.0
• 6677eb9 build(deps): bump go.step.sm/crypto from 0.66.0 to 0.67.0
• 8952d7e build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2
• 226c87d Merge pull request #366 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.2
• fda2040 build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2
• 929460d Merge pull request #364 from smallstep/dependabot/go_modules/golang.org/x/net-0.41.0
• 22ec0e7 build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0
• 5f684e2 Merge pull request #365 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.73.0
• c4a8f5d build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0
• 00ece25 Merge pull request #363 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.66.0
• 6f1a454 build(deps): bump go.step.sm/crypto from 0.64.0 to 0.66.0
• 78d294d Merge pull request #362 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.2
• f21cfb0 build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2
• e964ef4 Merge pull request #360 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.64.0
• 8f08392 build(deps): bump go.step.sm/crypto from 0.63.0 to 0.64.0
• 2644499 Merge pull request #359 from smallstep/herman/fix-example-linting-issues
• 96fc385 Fix linting issues in examples
• afe2f67 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1
• 5971033 Merge pull request #357 from smallstep/dependabot/go_modules/golang.org/x/net-0.40.0
• dee9d06 build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0
• 74a013b Merge pull request #356 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.63.0
• 8796f4d build(deps): bump go.step.sm/crypto from 0.61.0 to 0.63.0
• fd73e22 Merge pull request #355 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.0
• f4143f7 build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
• 365e0be Merge pull request #353 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.61.0
• 0a248ce Merge pull request #354 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.2
• 8c8c586 build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2
• e12ea5e build(deps): bump go.step.sm/crypto from 0.60.0 to 0.61.0
• aa9a8af Merge pull request #350 from smallstep/dependabot/go_modules/golang.org/x/net-0.39.0
• 157860f build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0
• 2af9637 Merge pull request #349 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.1
• 341d723 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
• 283d1d2 Merge pull request #348 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.60.0
• f3c2e66 build(deps): bump go.step.sm/crypto from 0.59.1 to 0.60.0
• 0ed792c Merge pull request #347 from smallstep/dependabot/go_modules/golang.org/x/net-0.38.0
• a4cb288 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
• e0e1f05 Merge pull request #346 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.3
• 86c0f66 build(deps): bump github.com/smallstep/certificates

Thanks!

Those were the changes on v0.20.2-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.2-rc1 (25-07-14) Pre-release

Pre-release

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• d306f63 Merge pull request #341 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
• 664a150 build(deps): bump go.step.sm/crypto from 0.59.0 to 0.59.1
• 1896188 Merge pull request #343 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
• f07cab3 build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0
• eae2a64 Merge pull request #339 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.0
• 015fe4d build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
• 10534c3 Merge pull request #338 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
• f88e0f0 build(deps): bump go.step.sm/crypto from 0.58.0 to 0.59.0
• b272d34 Merge pull request #337 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
• 36f71b1 build(deps): bump github.com/smallstep/cli-utils from 0.10.0 to 0.12.1
• f1c6458 Merge pull request #336 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
• aa9a51a build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
• ac8fa05 Merge pull request #335 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• 60a286e build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
• 1c1c99d Merge pull request #332 from smallstep/dependabot/go_modules/k8s.io/api-0.33.0-alpha.2
• 0d2da32 build(deps): bump k8s.io/api from 0.32.0-alpha.0 to 0.33.0-alpha.2
• fc8bbe1 Merge pull request #331 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.33.0-alpha.2
• 49a27a9 build(deps): bump k8s.io/apimachinery
• 3774c48 Merge pull request #333 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.2
• f454044 build(deps): bump github.com/smallstep/certificates
• d55beec Merge pull request #334 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
• b31f3bc Use Go 1.23 and run go mod tidy
• be39a67 build(deps): bump go.step.sm/crypto from 0.57.1 to 0.58.0
• 3c488bc Merge pull request #330 from smallstep/dependabot/go_modules/golang.org/x/net-0.35.0
• b15e3b9 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
• 3fe24cc Merge pull request #327 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
• 74c3670 build(deps): bump go.step.sm/crypto from 0.57.0 to 0.57.1
• ed40d84 Merge pull request #325 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
• ef16513 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0
• b69d70c Merge pull request #326 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
• 0763dd8 build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4
• d425590 Merge pull request #323 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
• c1d3c50 build(deps): bump go.step.sm/crypto from 0.56.0 to 0.57.0
• bdfba60 Merge pull request #324 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
• d998d11 build(deps): bump google.golang.org/grpc from 1.69.2 to 1.69.4
• f39dbb1 Merge pull request #321 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
• 06db4fe Merge pull request #322 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
• 19db1da build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
• 1017219 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
• fdd29c6 Merge pull request #319 from smallstep/dependabot/go_modules/golang.org/x/net-0.33.0
• 0b75e1c build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
• 186603e Merge pull request #318 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.2
• fa54028 build(deps): bump google.golang.org/grpc from 1.69.0 to 1.69.2
• d2660e1 Merge pull request #320 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.56.0
• ffe5e52 build(deps): bump go.step.sm/crypto from 0.55.0 to 0.56.0
• 9e763bc Merge pull request #316 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.0
• 63ef3c7 Merge pull request #317 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
• 1330879 build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0
• 10d9180 Merge pull request #315 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
• ec3e097 build(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0
• 4e6dd8e build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
• 6827cb0 Merge pull request #313 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.68.1
• ce19e89 build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.1
• 3ca0ef8 Merge pull request #314 from smallstep/dependabot/go_modules/golang.org/x/net-0.32.0
• aa0af60 build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
• 8ceedfa Merge pull request #312 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
• fa4bde5 build(deps): bump go.step.sm/crypto from 0.54.2 to 0.55.0

Thanks!

Those were the changes on v0.20.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.1 (25-03-18)

Compare

Choose a tag to compare

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.1-rc4_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.1-rc4_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.1-rc4_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• deebf9a empty commit
• d306f63 Merge pull request #341 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
• 664a150 build(deps): bump go.step.sm/crypto from 0.59.0 to 0.59.1
• 1896188 Merge pull request #343 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
• f07cab3 build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0
• eae2a64 Merge pull request #339 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.0
• 015fe4d build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
• 10534c3 Merge pull request #338 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
• f88e0f0 build(deps): bump go.step.sm/crypto from 0.58.0 to 0.59.0
• b272d34 Merge pull request #337 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
• 36f71b1 build(deps): bump github.com/smallstep/cli-utils from 0.10.0 to 0.12.1
• f1c6458 Merge pull request #336 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
• aa9a51a build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
• ac8fa05 Merge pull request #335 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• 60a286e build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
• 1c1c99d Merge pull request #332 from smallstep/dependabot/go_modules/k8s.io/api-0.33.0-alpha.2
• 0d2da32 build(deps): bump k8s.io/api from 0.32.0-alpha.0 to 0.33.0-alpha.2
• fc8bbe1 Merge pull request #331 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.33.0-alpha.2
• 49a27a9 build(deps): bump k8s.io/apimachinery
• 3774c48 Merge pull request #333 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.2
• f454044 build(deps): bump github.com/smallstep/certificates
• d55beec Merge pull request #334 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
• b31f3bc Use Go 1.23 and run go mod tidy
• be39a67 build(deps): bump go.step.sm/crypto from 0.57.1 to 0.58.0
• 3c488bc Merge pull request #330 from smallstep/dependabot/go_modules/golang.org/x/net-0.35.0
• b15e3b9 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
• 3fe24cc Merge pull request #327 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
• 74c3670 build(deps): bump go.step.sm/crypto from 0.57.0 to 0.57.1
• ed40d84 Merge pull request #325 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
• ef16513 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0
• b69d70c Merge pull request #326 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
• 0763dd8 build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4
• d425590 Merge pull request #323 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
• c1d3c50 build(deps): bump go.step.sm/crypto from 0.56.0 to 0.57.0
• bdfba60 Merge pull request #324 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
• d998d11 build(deps): bump google.golang.org/grpc from 1.69.2 to 1.69.4
• f39dbb1 Merge pull request #321 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
• 06db4fe Merge pull request #322 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
• 19db1da build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
• 1017219 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
• fdd29c6 Merge pull request #319 from smallstep/dependabot/go_modules/golang.org/x/net-0.33.0
• 0b75e1c build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
• 186603e Merge pull request #318 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.2
• fa54028 build(deps): bump google.golang.org/grpc from 1.69.0 to 1.69.2
• d2660e1 Merge pull request #320 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.56.0
• ffe5e52 build(deps): bump go.step.sm/crypto from 0.55.0 to 0.56.0
• 9e763bc Merge pull request #316 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.0
• 63ef3c7 Merge pull request #317 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
• 1330879 build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0
• 10d9180 Merge pull request #315 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
• ec3e097 build(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0
• 4e6dd8e build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
• 6827cb0 Merge pull request #313 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.68.1
• ce19e89 build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.1
• 3ca0ef8 Merge pull request #314 from smallstep/dependabot/go_modules/golang.org/x/net-0.32.0
• aa0af60 build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
• 8ceedfa Merge pull request #312 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
• fa4bde5 build(deps): bump go.step.sm/crypto from 0.54.2 to 0.55.0

Thanks!

Those were the changes on v0.20.1-rc4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.1-rc4 (25-03-18) Pre-release

Pre-release

Compare

Choose a tag to compare