Mariano Cano

Document integration of dbmate on a existing schema

2

### Description The documentation should describe the process to integrate `dbmate` into an existing schema. After a first look at the docs it looks like the process should be something...

Use go.step.sm/crypto/kms

1

### Description This PR uses `go.step.sm/crypto/kms` as the kms package. Fixes #975

### Description Remove the Go package `gitHub.com/smallstep/certificates/kms` and use `go.step.sm/crypto/kms` instead.

### Description Instead of using a JWK/X5c provisioner to request the signing of the certificate to the CA, we can implement some kind of authenticated API similar to Google CAS...

Device attestation

2

### Description Support for ACME device-attest-01 challenge. See: - https://datatracker.ietf.org/doc/html/draft-bweeks-acme-device-attest-00 - https://developer.apple.com/documentation/devicemanagement/acmecertificate - https://developer.apple.com/videos/play/wwdc2022/10143/ We need to add SAN support for permanent identifiers in `go.step.sm/crypto`. There's some work by @brandonweeks...

Certificate transparency

3

### Description This PR adds alpha support for certificate transparency support in step certificates.

### Description Although `step-pkcs11-init` is intended as a script that can be modified for specific purposes, it lacks a specific functionality that should be useful, being able to sign an...

Create new docker image with CGO enabled

1

### Description We should add a new docker image where step-ca is built with CGO enabled (e.g. `smallstep/step-ca-cgo`). This will allow users to create custom images to support a specific...

### Description Please describe your pull request. 💔Thank you!

### Description PR https://github.com/smallstep/certificates/pull/871 changed the default renewBefore, to be based on the time until the next renewal, instead of the full validity of the certificate. This works ok when...