https://cybertoolchain.io/tools/step-ca New releases and features in step-ca, tracked by The Cyber Toolchain. en Wed, 03 Dec 2025 05:00:58 GMT https://github.com/smallstep/certificates/releases/tag/v0.29.0 https://github.com/smallstep/certificates/releases/tag/v0.29.0 Wed, 03 Dec 2025 05:00:58 GMT step-ca v0.29.0 adds sd_notify support and Docker initialization environment variables. • `feat: Add sd_notify support` enables systemd-compatible ready notifications for the service • `DOCKER_STEPCA_INIT_*` environment variables are added to pass configuration during container startup Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-ca https://github.com/smallstep/certificates/releases/tag/v0.28.4 https://github.com/smallstep/certificates/releases/tag/v0.28.4 Mon, 14 Jul 2025 14:05:49 GMT step-ca v0.28.4 adds GCP organization checking capability • Enables organization-level identity validation for GCP Workload Identity Federation tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-ca https://github.com/smallstep/certificates/releases/tag/v0.28.1 https://github.com/smallstep/certificates/releases/tag/v0.28.1 Wed, 20 Nov 2024 20:01:37 GMT step-ca v0.28.1 adds data support on SCEPCHALLENGE webhooks and propagates human errors from them • `SCEPCHALLENGE` webhooks now pass webhook payload data to the remote endpoint • Human errors from `SCEPCHALLENGE` webhooks are now propagated back to the client Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-ca https://github.com/smallstep/certificates/releases/tag/v0.27.1 https://github.com/smallstep/certificates/releases/tag/v0.27.1 Fri, 12 Jul 2024 21:52:26 GMT Adds --dns.strict flag for step-ca to enforce strict DNS resolution. • Adds `--dns.strict` CLI flag to enable strict DNS resolution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-ca https://github.com/smallstep/certificates/releases/tag/v0.27.0 https://github.com/smallstep/certificates/releases/tag/v0.27.0 Fri, 12 Jul 2024 07:28:28 GMT step-ca v0.27.0 adds support for validities in templates and an Uninitialized state for provisioners • Adds support for validities in certificates templates, allowing precise control over certificate expiration times during issuance. • Introduces an `Uninitialized` state for provisioners (replacing the previous `Disabled` state) to manage their lifecycle explicitly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-ca https://github.com/smallstep/certificates/releases/tag/v0.26.1 https://github.com/smallstep/certificates/releases/tag/v0.26.1 Mon, 22 Apr 2024 20:38:45 GMT step-ca v0.26.1 allows custom SCEP key managers and adds kmsapi.Decrypter support • Adds `kmsapi.Decrypter` interface support to the instrumented key manager Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-ca https://github.com/smallstep/certificates/releases/tag/v0.22.0 https://github.com/smallstep/certificates/releases/tag/v0.22.0 Fri, 26 Aug 2022 00:20:42 GMT step-ca v0.22.0 adds RA provisioner info to linkedca and disables SSH hosts list API via `disableSSHHostsListAPI`. • Adds the `IsCAServerCert` field to expose whether an endpoint certificate is a CA server certificate. • Adds a middleware to automatically route HEAD requests to GET for supported endpoints. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-ca