Herman Slatman

This PR adds support for propagating the request ID to the webhook receiver. The request ID is sent in the `X-Request-ID` header and uses the value that is originally created...

Return `accountDoesNotExist` when account not found when creating an ACME order

1

After clearing or resetting the DB it can happen that previously registered ACME accounts are not available anymore. Currently we return a HTTP 500 and log a fairly non-descriptive error...

Improve URI policy configuration and matching

1

## Hello! - Vote on this issue by adding a 👍 reaction - If you want to implement this feature, comment to let us know (we'll work with you on...

Add a basic `step ssh verify` command

1

This PR adds `verify` as an `ssh` subcommand. It verifies an SSH certificate using the `ssh.CertChecker` struct with basic options applied. Example output: ```console # failure with wrong CA key:...

When a SCEP server returns multiple certificates, it is possible that not all certificates can or should be used for encryption. There already was a `KeyEnciphermentsSelector`, but that wasn't readily...

Improve example logging configuration for CrowdSec ingestion

2

As discussed in #9, the example configuration that's currently available in this repo is out of date. We should update it to reflect the current state of things.

Add `ACMECertificate` payload handling with Device Attestation

5

This adds support for handling the `ACMECertificate` payload. Currently always requires configuration for the (fake) attestation CA to be supplied: ```console $ ./mdmb -uuids 2678F47F-7A0B-4E7E-BEBC-29C1DCAF28C6 devices-profiles-install -f acme-da.mobileconfig -cert attca.crt...

Upgrade `k8s.io/client-go` and `sigs.k8s.io/controller-runtime`

2

Replaces #181 and #180

### What would you like to be added? Upgrade to Go JOSE v4 ### Why this is needed Tracking issue for upgrading this in due time. It was released in...