certificates

certificates copied to clipboard

[Bug]: Error on Windows curl CRYPT_E_NO_REVOCATION_CHECK

15

### Steps to Reproduce I ran the bootstrap command with `--install` on a Windows 10 and 11 but cannot find the trusted certificate in the trusted computer store nor does...

muuvmuuv

Add ARI support

2

### Discussed in https://github.com/smallstep/certificates/discussions/2160 Originally posted by **juju4** February 9, 2025 https://datatracker.ietf.org/doc/html/draft-ietf-acme-ari-07#name-getting-renewal-information https://community.letsencrypt.org/t/ari-implementations/218730/15 I tested with ansible module community.crypto.acme_ari_info and it returned "The ACME endpoint does not support ACME Renewal...

hslatman

Hey all, I'm submitting a PR to enable validating that a project is a part of a GCP organization, rather than a static list of project IDs. As I mention...

ericnorris

How to create a dns allow policy that can use sub-sub domains?

2

## Hello! - Vote on this issue by adding a 👍 reaction - If you want to document this feature, comment to let us know (we'll work with you on...

akumar-xyz

[Bug]: step ca sign with local challenge: "The server could not connect to validation target"

4

### Steps to Reproduce The documentation states that a CSR can be signed **locally** (i.e. without connecting to a remote subject) with the following: > Sign a CSR using the...

cmjdiff

Problem with enrollment on cisco router

12

I tried to make a lab with an IpSec VPN between 2 Cisco 2800 routers (old, with only SHA1 hash) with a scep auto enrollment. I have to use an...

Drig69

### TL;DR When the "db" property is not set in `ca.json`, and you are using an ACME provisioner, the ACME provisioner does not work, and gives no indication of this...

redmushie

[Bug]: cannot import root certificate from `mkcert`

3

### Steps to Reproduce https://github.com/userid0x0/step-ca-mkcert-problem ### Your Environment * OS - Linux using Docker * `step-ca` Version ``` "Id": "sha256:9c6a2d85468e45cd6c44bf39241a1781230b259954644d34c724cce948747b84", "RepoTags": [ "smallstep/step-ca:latest" ], "RepoDigests": [ "smallstep/step-ca@sha256:a8308bddba866f5fccb2740c8bb2e5dea8cdde4b5856058539a7f5170894a9c0" ], "Parent": "",...

userid0x0

fix: allow active revocation on http revoke endpoint

1

#### Name of feature: Allow active revocation via http endpoint #### Pain or issue this feature alleviates: active revocation was already possible via cli but not via http

VonRehberg

add docker compose for stack deployment

3

## Hello! I would like the ability to deploy step-ca with a docker compose file. This would allow me to deploy this as a stack for managers like portainer. Once...

VorlMaldor