Autocert v0.20.5-rc1 (26-01-22)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.5-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.5-rc1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.5-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 1b3565e Update cosign command
• b813206 Merge pull request #421 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.9.4
• 8568712 build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4
• c501e42 Merge pull request #420 from smallstep/dependabot/go_modules/golang.org/x/net-0.49.0
• 69a6cb2 build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0
• 6e4c3d4 Merge pull request #419 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.78.0
• 813c2dd build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0
• e8e4367 Merge pull request #418 from smallstep/dependabot/go_modules/golang.org/x/net-0.48.0
• f8a853b build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0
• c74e086 Merge pull request #415 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.75.0
• b604cb5 Merge pull request #417 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
• 21c352b build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
• 3379439 build(deps): bump go.step.sm/crypto from 0.74.0 to 0.75.0

Thanks!

Those were the changes on v0.20.5-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.