Autocert v0.20.1-rc3 (25-02-12)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.1-rc3_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.1-rc3_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.1-rc3_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• b87ba06 empty commit
• dbaecf1 Bump go version in go.mod to 1.23.0

Thanks!

Those were the changes on v0.20.1-rc3!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.