From e542a26d4ba997e873465982f9b88844dfb50fea Mon Sep 17 00:00:00 2001
From: Carl Tashian <carl@smallstep.com>
Date: Tue, 13 Feb 2024 14:54:31 -0800
Subject: [PATCH] Fix RA installer step-ca package URL

---
 scripts/install-step-ra.sh | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/scripts/install-step-ra.sh b/scripts/install-step-ra.sh
index 07875601..0c08989e 100644
--- a/scripts/install-step-ra.sh
+++ b/scripts/install-step-ra.sh
@@ -184,14 +184,12 @@ if [ -z "$CA_PROVISIONER_JWK_PASSWORD_FILE" ]; then
 fi
 
 echo "Installing 'step-ca' in /usr/bin..."
-CA_VERSION=$(curl -s https://api.github.com/repos/smallstep/certificates/releases/latest | jq -r '.tag_name')
-
-curl -sLO https://github.com/smallstep/certificates/releases/download/$CA_VERSION/step-ca_linux_${CA_VERSION:1}_$arch.tar.gz
-tar -xf step-ca_linux_${CA_VERSION:1}_$arch.tar.gz
-install -m 0755 -t /usr/bin step-ca_${CA_VERSION:1}/step-ca
+curl -sLO https://dl.smallstep.com/certificates/ra-installer/latest/step-ca_linux_$arch.tar.gz
+tar -xf step-ca_linux_$arch.tar.gz
+install -m 0755 -t /usr/bin step-ca_linux_$arch/step-ca
 setcap CAP_NET_BIND_SERVICE=+eip $(which step-ca)
-rm step-ca_linux_${CA_VERSION:1}_$arch.tar.gz
-rm -rf step-ca_${CA_VERSION:1}
+rm step-ca_linux_$arch.tar.gz
+rm -rf step-ca_linux_$arch
 
 echo "Creating 'step' user..."
 export STEPPATH=/etc/step-ca