diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2ab7084d..c90d949a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -139,7 +139,7 @@ jobs: name: Run GoReleaser uses: goreleaser/goreleaser-action@5a54d7e660bda43b405e8463261b3d25631ffe86 # v2.7.0 with: - version: latest + version: 'v1.7.0' args: release --rm-dist env: GITHUB_TOKEN: ${{ secrets.PAT }} diff --git a/.goreleaser.yml b/.goreleaser.yml index 441d5785..7d57e657 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -230,42 +230,3 @@ scoop: # Your app's license # Default is empty. license: "Apache-2.0" - - #dockers: - # - dockerfile: docker/Dockerfile - # goos: linux - # goarch: amd64 - # use_buildx: true - # image_templates: - # - "smallstep/step-cli:latest" - # - "smallstep/step-cli:{{ .Tag }}" - # build_flag_templates: - # - "--platform=linux/amd64" - # - dockerfile: docker/Dockerfile - # goos: linux - # goarch: 386 - # use_buildx: true - # image_templates: - # - "smallstep/step-cli:latest" - # - "smallstep/step-cli:{{ .Tag }}" - # build_flag_templates: - # - "--platform=linux/386" - # - dockerfile: docker/Dockerfile - # goos: linux - # goarch: arm - # goarm: 7 - # use_buildx: true - # image_templates: - # - "smallstep/step-cli:latest" - # - "smallstep/step-cli:{{ .Tag }}" - # build_flag_templates: - # - "--platform=linux/arm/v7" - # - dockerfile: docker/Dockerfile - # goos: linux - # goarch: arm64 - # use_buildx: true - # image_templates: - # - "smallstep/step-cli:latest" - # - "smallstep/step-cli:{{ .Tag }}" - # build_flag_templates: - # - "--platform=linux/arm64/v8" diff --git a/CHANGELOG.md b/CHANGELOG.md index bb9ea0f9..fdd504e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,19 +4,41 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). -## [Unreleased - 0.18.3] - DATE +## [Unreleased - 0.19.1] - DATE +### Added +### Changed +### Deprecated +### Removed +### Fixed +### Security + +## [0.19.0] - 2022-04-19 ### Added - Added support for certificate renewals after expiry using the claim `allowRenewalAfterExpiry`. - Added support for `extraNames` in X.509 templates. +- Added `armv5` builds. - Added RA support using a Vault instance as the CA. +- Added `WithX509SignerFunc` authority option. +- Added a new `/roots.pem` endpoint to download the CA roots in PEM format. +- Added support for Azure `Managed Identity` tokens. - Added support for automatic configuration of linked RAs. +- Added support for the `--context` flag. It's now possible to start the + CA with `step-ca --context=abc` to use the configuration from context `abc`. + When a context has been configured and no configuration file is provided + on startup, the configuration for the current context is used. +- Added startup info logging and option to skip it (`--quiet`). ### Changed -- Made SCEP CA URL paths dynamic -- Support two latest versions of Go (1.17, 1.18) +- Made SCEP CA URL paths dynamic. +- Support two latest versions of Go (1.17, 1.18). +- Upgrade go.step.sm/crypto to v0.16.1. +- Upgrade go.step.sm/linkedca to v0.15.0. ### Deprecated +- Go 1.16 support. ### Removed ### Fixed - Fixed admin credentials on RAs. +- Fixed ACME HTTP-01 challenges for IPv6 identifiers. +- Various improvements under the hood. ### Security ## [0.18.2] - 2022-03-01 @@ -52,7 +74,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. - Support for multiple certificate authority contexts. - Support for generating extractable keys and certificates on a pkcs#11 module. ### Changed -- Support two latest versions of golang (1.16, 1.17) +- Support two latest versions of Go (1.16, 1.17) ### Deprecated - go 1.15 support diff --git a/ca/ca.go b/ca/ca.go index 3c60f9e5..a08dc9e9 100644 --- a/ca/ca.go +++ b/ca/ca.go @@ -322,7 +322,7 @@ func (ca *CA) Run() error { log.Printf("X.509 Root Fingerprint: %s", x509util.Fingerprint(crt)) } if authorityInfo.SSHCAHostPublicKey != nil { - log.Printf("SSH Host CA Key is %s\n", authorityInfo.SSHCAHostPublicKey) + log.Printf("SSH Host CA Key: %s\n", authorityInfo.SSHCAHostPublicKey) } if authorityInfo.SSHCAUserPublicKey != nil { log.Printf("SSH User CA Key: %s\n", authorityInfo.SSHCAUserPublicKey) diff --git a/scripts/install-step-ra.sh b/scripts/install-step-ra.sh index 1da64ed6..74aa1914 100644 --- a/scripts/install-step-ra.sh +++ b/scripts/install-step-ra.sh @@ -38,11 +38,6 @@ case $arch in armv7*) arch="armv7" ;; esac -if [ "$arch" = "armv5" ]; then - echo "This script doesn't work on armv5 machines" - exit 1 -fi - if ! hash jq &> /dev/null; then echo "This script requires the jq commmand; please install it." exit 1