Skip to content

[Bug]: Cannot sign using cloudkms: since v0.30.1 #1601

Closed

Description

@GBBx

Steps to Reproduce

I use step-cli 0.29.0 with step-kms-plugin 0.16.1. I can sign certificates like this:

step certificate sign   --kms "cloudkms:"  \
  --not-after 1h \
  example.csr \
  intermediate.crt   "projects/..." > example.crt

However, if I update step-cli to 0.30.1 (keeping step-kms-plugin 0.16.1) and execute the same command I get this message:

Error: cloudkms: does not implement a CertificateManager

Your Environment

  • OS - Linux
  • step CLI Version - 0.30.1

Expected Behavior

I should be able to sign the same way as with the previous version.

Actual Behavior

I get an error message with the newer version.

Additional Context

No response

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

Activity

  1. added
    needs triageWaiting for discussion / prioritization by team
    on Mar 27, 2026
  2. maraino commented on Mar 31, 2026

    @maraino
    Collaborator

    Hi @GBBx, I need to take a closer look at what’s going on. One change introduced in the latest version of step is that the --kms flag is no longer required, although it should still be supported. As a fallback, this should work:

    step certificate sign hello.csr issuer.crt cloudkms:projects/.../cryptoKeyVersions/1
    
  3. GBBx commented on Apr 1, 2026

    @GBBx
    Author

    Thank you @maraino , it worked.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugneeds triageWaiting for discussion / prioritization by team

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions