https://cybertoolchain.io/tools/step-cli New releases and features in step CLI, tracked by The Cyber Toolchain. en Wed, 05 Mar 2025 01:01:11 GMT https://github.com/smallstep/cli/releases/tag/v0.28.4 https://github.com/smallstep/cli/releases/tag/v0.28.4 Wed, 05 Mar 2025 01:01:11 GMT Adds STEP_OPEN_BROWSER env var support and custom user claim to ca token • `STEP_OPEN_BROWSER=false` skips launching the default browser during authentication flows • `step ca token` now supports a custom "user" claim via `--user` flag Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.28.3 https://github.com/smallstep/cli/releases/tag/v0.28.3 Thu, 20 Feb 2025 17:49:30 GMT step CLI v0.28.3 adds KMS support to `ca renew` and `ca rekey` commands • Adds `--kms` flag support in the `ca renew` command • Adds `--kms` flag support in the `ca rekey` command Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.28.0 https://github.com/smallstep/cli/releases/tag/v0.28.0 Wed, 30 Oct 2024 00:03:12 GMT v0.28.0 adds disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner; fixes --context bug. • Adds `disableSSHCAUser` and `disableSSHCAHost` attributes to GCP provisioner for fine-grained SSH CA permissions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.27.5 https://github.com/smallstep/cli/releases/tag/v0.27.5 Thu, 17 Oct 2024 01:40:52 GMT Adds `--remove-scope` flag to strip scope from certificates • Adds the `--remove-scope` flag to remove scope fields from issued certificates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.27.4 https://github.com/smallstep/cli/releases/tag/v0.27.4 Fri, 13 Sep 2024 17:37:15 GMT Adds stdin input for `step certificate fingerprint` in v0.27.4 • `step certificate fingerprint` now allows piped or redirected input • Parse `crlEntryExtensions` field in CRLs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.27.2 https://github.com/smallstep/cli/releases/tag/v0.27.2 Thu, 18 Jul 2024 18:14:47 GMT Adds `--console` flag to `step ssh` commands • Adds the `--console` flag to `step ssh` commands Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.26.2 https://github.com/smallstep/cli/releases/tag/v0.26.2 Thu, 13 Jun 2024 17:31:38 GMT step v0.26.2 adds template flags to provisioner commands, OCSP/CRL verify support, SSH key type and comment options, and stdin for needs-renewal. • Adds `--template`, `--template-file`, and `--json` flags to `step ca provisioner add` to customize certificate generation templates when creating a new provisioner • Adds `--template`, `--template-file`, and `--json` flags to `step ca provisioner update` to modify the certificate template of an existing provisioner • Enables OCSP and CRL checking in `step certificate verify` by parsing the relevant extensions from the certificate chain • Adds `--comment` flag to `step ssh agent` for setting a custom comment on SSH keys generated by the agent • Supports configuring SSH key types (e.g., ed25519, rsa) via `step ssh agent` options • Allows passing a certificate directly via stdin to `step ca needs-renewal` using `-` as the file argument Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.25.1 https://github.com/smallstep/cli/releases/tag/v0.25.1 Wed, 29 Nov 2023 03:44:43 GMT step CLI v0.25.1 adds step rand command and --password-file for JWE decrypt • Adds the `step rand` subcommand for generating random numbers • Adds `--password-file` flag to `step crypto jwe decrypt` to specify a file containing the decryption password Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.21.0 https://github.com/smallstep/cli/releases/tag/v0.21.0 Wed, 06 Jul 2022 22:23:38 GMT step CLI v0.21.0 adds `--password-file` for offline signing, `--console-flow` for OAuth, and restores `--domain` flags. • Adds `--password-file` flag to `step ca sign` to allow password input via file for offline mode • Adds `--console-flow` flag to `step oauth` to select alternative OAuth flows Breaking changes: • The `--device` flag is removed from `step oauth`; flow selection is now automatic based on provider Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.20.0 https://github.com/smallstep/cli/releases/tag/v0.20.0 Thu, 26 May 2022 18:39:52 GMT step CLI v0.20.0 adds policy management subcommands, wildcard name support, and SSH certificate inspection • Adds `step ca policy` commands for managing CA policies • Adds `step cert inspect` to inspect SSH certificates without requiring a type argument Breaking changes: • `provisioner beta` commands are removed; use the combined provisioner subcommand instead Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.19.0 https://github.com/smallstep/cli/releases/tag/v0.19.0 Tue, 19 Apr 2022 23:07:58 GMT Adds SHA1 fingerprint support in `step certificate inspect`, renewal-after-expiry flags for CA tokens and provisioners, and Azure MSI token auth updates. • Adds optional SHA1 fingerprint output to `step certificate inspect` via the new `--sha1` flag • Allows generating renewal tokens with `step ca token` that are valid after expiry using the new `--allow-renew-after-expiry` flag • Adds `--allow-renew-after-expiry` flag when adding provisioners to enable renewal logic for expired certificates • Adds support for the `--x5c-insecure` flag in `step ca token` to generate tokens with the x5cInsecure header set • Enables generating Azure tokens from managed identities not associated with a specific VM • Adds options for specifying Azure subscription and object IDs when configuring the Azure provisioner Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.18.2 https://github.com/smallstep/cli/releases/tag/v0.18.2 Tue, 01 Mar 2022 23:21:54 GMT step v0.18.2 adds --provisioner-password-file flag and improves ACME/IP handling • Adds `--provisioner-password-file` argument to the `proxycommand` subcommand for supplying provisioner passwords via file instead of stdin or prompt. • Increases the displayed column width for the ACME Account ID in CLI output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli https://github.com/smallstep/cli/releases/tag/v0.18.0 https://github.com/smallstep/cli/releases/tag/v0.18.0 Wed, 17 Nov 2021 21:11:50 GMT step CLI v0.18.0 adds context management, SSH user data V2 support, and ACME challenge timing tweaks • Adds `context set`, `context select`, `context remove`, and `ca bootstrap` helper commands to manage named profiles and authorities. • Adds the `--team` flag to `step ssh config` to enable multi-context SSH configuration generation for teams with subdomain separation. • Introduces `Version:v2` in the SSH config user data map, updating the default template attributes for generated OpenSSH configs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/step-cli