certificates

certificates copied to clipboard

### Description With template support a lot of certificate modifiers/enforces are probably not being used at all, we should remove them from the code.

maraino

WIP: Add Apple AppAttest support

5

This is still extremely WIP but implements attestation as defined https://developer.apple.com/documentation/devicecheck/validating_apps_that_connect_to_your_server #### Name of feature: Apple AppAttest #### Pain or issue this feature alleviates: Apple AppAttest is a service for...

arianvp

### Description We should remove these deprecated binaries from the code, ci, and docker images: * step-awskms-init * step-cloudkms-init * step-pkcs11-init * step-yubikey-init Consider adding `step-kms-plugin` to docker images.

maraino

### Description For TPMs especially we will need to be able to configure the RootCAs and probably the IntermediateCAs to validate an EK certificate. We should add options to the...

maraino

Changing the ACME http-01 challenge port for testing purposes

4

### Discussed in https://github.com/smallstep/certificates/discussions/1007 Originally posted by **sbszcz** August 11, 2022 Hello there, is it possible to change the ACME http-01 challenge port via some configuration properties for testing purposes?...

pcornelissen

### Description RAs (stepcas, vaultcas, cloudcas) can now support renewals if the cli sends the authentication token instead. We should implement the `RenewCertificate` function on those three implementations.

maraino

ACME: implement SSO challenge (draft-biggs-acme-sso-01)

2

## Hello! - Vote on this issue by adding a 👍 reaction - If you want to implement this feature, comment to let us know (we'll work with you on...

paul-snively

Wire ACME extensions

2

hslatman

Allow CA interface to control validation of Client Identifiers for device-attest-01 acme requests

1

#### Name of feature: Propagate attested client identifiers (serial and attestation object) to CA interface & allow global API level bypass of a) Client Identitifer to UUID/Serial association b) CSR...

venkyg-sec

Support executable provisioner password files in RA install script

4

#### Name of feature: Fixing install source of step-ca in setup script #### Pain or issue this feature alleviates: Following the guide on: https://smallstep.com/docs/registration-authorities/acme-for-certificate-manager/index.html?fingerprint=41363fbbc3b4c23a38b1ad6120da34a7876e0480bebd8aa72c12d7a7dbe75d29&caUrl=https://home.edholm.ca.smallstep.com&#1-create-your-ra leads me to download a setup...

yarcod