Autocert v0.19.6 (24-09-18)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.19.6_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.19.6_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.19.6_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 234667f Merge pull request #286 from smallstep/max/empty-commit
• 72badd6 empty commit

Thanks!

Those were the changes on v0.19.6!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.