certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

APACHE-2.0 License

Stars
6.1K
Committers
79

Bot releases are visible (Hide)

certificates - v0.16.4

Published by github-actions[bot] about 3 years ago

Changelog

2317bf1 Nosql and badger bump

certificates - v0.16.2

Published by github-actions[bot] about 3 years ago

Changelog

050b233 Merge branch 'docker-init'
f738cb4 Make the default provisioner name optional; change DNS names variable name
7f2516f Merge pull request #678 from smallstep/docker-init
4e8e4c6 Add newline to password file for readabiliy
bc63829 Auto-generate password by default
7ab26c8 Auto-generate password by default
8d52379 New Dockerfile with entrypoint script for easy CA init

certificates - v0.16.1

Published by github-actions[bot] about 3 years ago

Changelog

f53f789 Badger bump to fix issue with caddy build
33b6d4c Merge pull request #677 from smallstep/go1.17
b88b2f9 Just adding a comment to the step-ra install script
dc5205c Extract the tls error code and fail accordingly.
ae58a0e Make tests compatible with Go 1.17.
abd78e2 Make kms uri compatible with Go 1.17.
a864f01 Fix key version when SHA512WithRSA is used.
6a7ea71 Merge pull request #672 from smallstep/azure-tofu
d4ae267 Fix ErrAllowTokenReuse comment.
9e5762f Allow the reuse of azure token if DisableTrustOnFirstUse is true
9572c62 Merge pull request #657 from smallstep/ra-installer
97af829 RA install script
53d08e1 Remove microbadger.com (the website is gone)
8f4c833 Update README.md
cff1969 Merge pull request #654 from smallstep/needs-renewal
09b554f Merge pull request #609 from smallstep/discord
22ef324 Fix needs-renewal condition and switch to using ExecCondition
f8c137a Update provisioners.md
28acc1b Merge pull request #653 from smallstep/needs-renewal
0dd6564 README link fixes
3e5b90b systemd cert renewer can now use 'step certificate needs-renewal'
bd51b1f Updates for new issue page
a3af991 Update pull request labeler action
b71ff09 UI updates for certificates new issue page
4aa5296 Merge pull request #641 from hillu/quote-serial
76413b8 Merge pull request #644 from hslatman/hs/fix-provisioner-name-log
9210a67 Fix logging provisioner name as string
edb01bc Log certificate's serial number as stringified decimal number
9d4e6e3 update readme page
2ac53f7 update gitter to discord

certificates - v0.16.0

Published by github-actions[bot] over 3 years ago

Changelog

b9743b3 Merge pull request #599 from smallstep/max/cert-mgr-crud
857a504 Merge branch 'master' into max/cert-mgr-crud
517fab1 Merge pull request #602 from hslatman/hs/ip-verification
681226a Merge branch 'master' into max/cert-mgr-crud
1df21b9 Addressing comments in PR review
bc14341 Fix bootstrap command.
5679c99 Fixes from PR review
77fdfc9 Merge branch 'master' into max/cert-mgr-crud
9fdef64 Admin level API for provisioner mgmt v1
8e4a4ec Refactor tests for sans
87b72af Fix IP equality check and add more tests
a6d33b7 Add tests for sans()
64c15fd Add tests for canonicalize function
7843c90 Merge branch 'master' of github.com:smallstep/certificates into hs/ip-verification
c514a18 Fix Fail() -_-b
135e912 Improve coverage for TLS-ALPN-01 challenge
218a2ad Add tests for IP Order validations
db416a4 Fix path for labeler.
f33bdee Fix linter issue S1025
8780409 Merge branch 'master' into hs/ip-verification
523ae96 Change identifier and challenge types to consts
84ea8bd Fix PR comments
af4803b Fix tests
0c79914 Improve check for single IP in TLS-ALPN-01 challenge
a6405e9 Remove fmt.
2f40011 Add support for TLS-ALPN-01 challenge
76dcf54 Fix mixed DNS and IP SANs in Order
af615db Support DNS and IPs as SANs in single Order
a0e92f8 Verify IP identifier contains valid IP
6486e60 Make logic for which challenge types to use clearer
3e36522 Add preliminary support for TLS-ALPN-01 challenge for IP identifiers
848b520 Merge branch 'master' into hs/ip-verification
6d9710c Add initial support for ACME IP validation
7e82bd6 Add setup for Authority tests
74d8bdc Add tests for CreateDecrypter
a64974c Fix small typo in divisible
382b6f9 Improve error logging
d46a4ea Change fmt to errors package for formatting errors
2beea1a Add configuration option for specifying the minimum public key length
4168449 Fix typo
fa100a5 Mask challenge password after it has been read
66a67ed Update to v2.0.0 of github.com/micromdm/scep
03c4723 Add sync.WaitGroup for proper error handling in Run()
1cd0cb9 Add more template data
13fe7a0 Make serving SCEP endpoints optional
bcacd2f Fix typo
a0242ad Add validation to SCEP Options
4cd45f6 Remove superfluous call to StoreCertificate
97b88c4 Address (most) PR comments
be528da Make tests green
57a6296 Make tests not fail hard on ECDSA keys
5a80bc3 Make linter happy
dd4f548 Fix certificateChain property
491c2b8 Improve initialization of SCEP authority
2d85d4c Add non-TLS server and improve crypto.Decrypter interface
e7cb80f Fix linter issues
aa2ce0a Store new certificates in database
f0050e5 Add signed failure responses
4fe7179 Add support for configuring capabilities (cacaps)
3b86550 Add support for challenge password
017e56c Remove some duplicate and unnecessary logic
75cd3ab Change to a fixed fork of go.mozilla.org/pkcs7
5df60c5 Add support for multiple SCEP provisioners
a191319 Improve SCEP API logic and error handling
30d3a26 Remove x509 template from API
da65f46 Add AuthorizeSign method to SCEP authority
812e1c7 Add handling of options
80026e1 Remove the copy of mozilla/pkcs7
2a249d2 Refactor initialization of SCEP authority
99cd3b7 Add full copy of mozilla/pkcs7 module as internal dependency
393be5b Add number of certs to return and fix CR LF in CACaps
b905d5f Improve setup for multiple SCEP providers (slightly)
3390397 Refactor SCEP authority initialization and clean some code
48c8671 Add rudimentary (and incomplete) support for SCEP
ff7b829 [action] forgot to add default labeler config file
114627d [action] labeler to v3 and use default config path location
d7a747b Add SCEP in the provisioners proto.
94ba057 wip
01a4460 wip
1726076 wip
423942d wip
3f30552 Fix package name.
35cfa5b Remove majordomo client and rename administrator to admin.
71afc41 Rename majordomo to linkedca.
64ce4e5 Add and generate majordomo protos.
9bfb1c2 wip
d8d5d73 wip
5929244 wip
9bf9bf1 wip
638766c wip
4f3e5ef wip
5d09d04 wip
4d48072 wip admin CRUD
98a6e54 wip
af3cf7d first steps
2f60f20 lots of codes
7b5d696 first commit

certificates - v0.15.16

Published by github-actions[bot] over 3 years ago

Changelog

6476eb4 Need RELEASE variable defined in make debian

certificates - v0.15.16-rc7

Published by github-actions[bot] over 3 years ago

Changelog

77fdfc9 Merge branch 'master' into max/cert-mgr-crud
9fdef64 Admin level API for provisioner mgmt v1
6476eb4 Need RELEASE variable defined in make debian
856f08b Merge pull request #605 from smallstep/casv1
65dacc2 Replace golint with revive
35e6cc2 Fix typos in comments.
a0633a6 Merge pull request #612 from gdbelvin/kmspin
1fb4406 minimize diff
c6bb7aa Add back UI check, but don't read file
a63a1d6 Don't double read from u.Pin()
063a09a Allow reading pin from kms string
c4d0c8a Fix credentials file parameter on awskms
16e0cff Fix path for labeler.
dce1b29 Remove debug statements.
2a97389 Upgrade dependencies.
ac3c754 Use known CA and add tier and gcs bucket options.
529eb4b Rename CAPool to CaPool.
9db68db Add tests with cloudCAS EnableCertificateAuthority.
48bc4e5 Fix cloudcas tests.
072bd0d Add support for Google CAS v1
35ede74 Merge pull request #596 from gdbelvin/name
595f125 Merge branch 'master' into name
e17fc43 Merge pull request #597 from gdbelvin/path
c264e8f Configurable pkcs11-init output paths
623e387 Allow configuration of PKCS11 subject name
7e82bd6 Add setup for Authority tests
74d8bdc Add tests for CreateDecrypter
a64974c Fix small typo in divisible
382b6f9 Improve error logging
d46a4ea Change fmt to errors package for formatting errors
2beea1a Add configuration option for specifying the minimum public key length
4168449 Fix typo
fa100a5 Mask challenge password after it has been read
66a67ed Update to v2.0.0 of github.com/micromdm/scep
03c4723 Add sync.WaitGroup for proper error handling in Run()
1cd0cb9 Add more template data
13fe7a0 Make serving SCEP endpoints optional
bcacd2f Fix typo
a0242ad Add validation to SCEP Options
4cd45f6 Remove superfluous call to StoreCertificate
97b88c4 Address (most) PR comments
be528da Make tests green
57a6296 Make tests not fail hard on ECDSA keys
5a80bc3 Make linter happy
dd4f548 Fix certificateChain property
491c2b8 Improve initialization of SCEP authority
2d85d4c Add non-TLS server and improve crypto.Decrypter interface
e7cb80f Fix linter issues
aa2ce0a Store new certificates in database
f0050e5 Add signed failure responses
4fe7179 Add support for configuring capabilities (cacaps)
3b86550 Add support for challenge password
017e56c Remove some duplicate and unnecessary logic
75cd3ab Change to a fixed fork of go.mozilla.org/pkcs7
5df60c5 Add support for multiple SCEP provisioners
a191319 Improve SCEP API logic and error handling
30d3a26 Remove x509 template from API
da65f46 Add AuthorizeSign method to SCEP authority
812e1c7 Add handling of options
80026e1 Remove the copy of mozilla/pkcs7
2a249d2 Refactor initialization of SCEP authority
99cd3b7 Add full copy of mozilla/pkcs7 module as internal dependency
393be5b Add number of certs to return and fix CR LF in CACaps
b905d5f Improve setup for multiple SCEP providers (slightly)
3390397 Refactor SCEP authority initialization and clean some code
48c8671 Add rudimentary (and incomplete) support for SCEP
ff7b829 [action] forgot to add default labeler config file
114627d [action] labeler to v3 and use default config path location
d7a747b Add SCEP in the provisioners proto.
94ba057 wip
8d7c3d2 Merge pull request #506 from hslatman/hs/scep
01a4460 wip
1726076 wip
781e0c4 [action] forgot to add default labeler config file
1be1ed1 [action] labeler to v3 and use default config path location
423942d wip
3f30552 Fix package name.
35cfa5b Remove majordomo client and rename administrator to admin.
71afc41 Rename majordomo to linkedca.
64ce4e5 Add and generate majordomo protos.
9bfb1c2 wip
d8d5d73 wip
5929244 wip
9bf9bf1 wip
bc2bb53 Merge branch 'master' into hs/scep
375687c Add setup for Authority tests
638766c wip
4f3e5ef wip
5d09d04 wip
4d48072 wip admin CRUD
98a6e54 wip
af3cf7d first steps
2f60f20 lots of codes
7b5d696 first commit
f84c8f8 Upgrade x/crypto
850b159 Merge pull request #571 from smallstep/carl/makefile-clean
b205f50 bump crypto to 0.8.3 and go mod tidy
07cf037 Remove binary-* recipes from Makefile
f83ccc3 Merge pull request #570 from smallstep/carl/arm6
e305940 Small docs cleanup
6f0f023 Small docs cleanup
08f9bc0 Merge pull request #567 from FibreFoX/master
9607691 Added missing hints for running step-ca on Raspberry Pi
877fc9a Add tests for CreateDecrypter
a3ec890 Fix small typo in divisible
54610e8 Improve error logging
d0a9cbc Change fmt to errors package for formatting errors
ff1b46c Add configuration option for specifying the minimum public key length
c04f556 Merge branch 'master' into hs/scep
68d5f6d Merge branch 'master' into hs/scep
2336936 Fix typo
9787728 Mask challenge password after it has been read
0487686 Merge branch 'master' into hs/scep
9447365 Merge branch 'master' into hs/scep
c3d9cef Update to v2.0.0 of github.com/micromdm/scep
2320d09 Add sync.WaitGroup for proper error handling in Run()
9bda3c4 Add more template data
b815478 Make serving SCEP endpoints optional
69d7010 Fix typo
c5e4ea0 Merge branch 'master' into hs/scep
65aab96 Add validation to SCEP Options
b97f024 Remove superfluous call to StoreCertificate
583d60d Address (most) PR comments
a526065 Merge branch 'master' into hs/scep
a4844fe Make tests green
9995208 Make tests not fail hard on ECDSA keys
e30084c Make linter happy
3e0dac3 Fix certificateChain property
e1cab49 Improve initialization of SCEP authority
8c5b12e Add non-TLS server and improve crypto.Decrypter interface
efd5501 Merge branch 'master' into hs/scep
538fe81 Fix linter issues
cc1ecb9 Store new certificates in database
47c2a82 Merge branch 'master' into hs/scep
9902dc1 Add signed failure responses
2536a08 Add support for configuring capabilities (cacaps)
e4d7ea8 Add support for challenge password
2d21b09 Remove some duplicate and unnecessary logic
99654f0 Merge branch 'master' into hs/scep
9df5f51 Change to a fixed fork of go.mozilla.org/pkcs7
3a5f633 Add support for multiple SCEP provisioners
2fc5a7f Improve SCEP API logic and error handling
a6d50f2 Remove x509 template from API
311c9d7 Add AuthorizeSign method to SCEP authority
4322933 Add handling of options
19f0397 Remove the copy of mozilla/pkcs7
7948f65 Merge branch 'master' into hs/scep
7ad90d1 Refactor initialization of SCEP authority
f871f81 Add full copy of mozilla/pkcs7 module as internal dependency
702032f Add number of certs to return and fix CR LF in CACaps
165f6a1 Improve setup for multiple SCEP providers (slightly)
78d7858 Add note about using a second (unsecured) server
9e43dc8 Merge branch 'master' into hs/scep-master
713b571 Refactor SCEP authority initialization and clean some code
ffdd58e Add rudimentary (and incomplete) support for SCEP

certificates - v0.15.16-rc5

Published by github-actions[bot] over 3 years ago

Changelog

6476eb4 Need RELEASE variable defined in make debian

certificates - v0.15.16-rc4

Published by github-actions[bot] over 3 years ago

Changelog

856f08b Merge pull request #605 from smallstep/casv1
65dacc2 Replace golint with revive
35e6cc2 Fix typos in comments.
a0633a6 Merge pull request #612 from gdbelvin/kmspin
1fb4406 minimize diff
c6bb7aa Add back UI check, but don't read file
a63a1d6 Don't double read from u.Pin()
063a09a Allow reading pin from kms string
c4d0c8a Fix credentials file parameter on awskms
16e0cff Fix path for labeler.
dce1b29 Remove debug statements.
2a97389 Upgrade dependencies.
ac3c754 Use known CA and add tier and gcs bucket options.
529eb4b Rename CAPool to CaPool.
9db68db Add tests with cloudCAS EnableCertificateAuthority.
48bc4e5 Fix cloudcas tests.
072bd0d Add support for Google CAS v1
35ede74 Merge pull request #596 from gdbelvin/name
595f125 Merge branch 'master' into name
e17fc43 Merge pull request #597 from gdbelvin/path
c264e8f Configurable pkcs11-init output paths
623e387 Allow configuration of PKCS11 subject name
8d7c3d2 Merge pull request #506 from hslatman/hs/scep
781e0c4 [action] forgot to add default labeler config file
1be1ed1 [action] labeler to v3 and use default config path location
bc2bb53 Merge branch 'master' into hs/scep
375687c Add setup for Authority tests
f84c8f8 Upgrade x/crypto
850b159 Merge pull request #571 from smallstep/carl/makefile-clean
b205f50 bump crypto to 0.8.3 and go mod tidy
07cf037 Remove binary-* recipes from Makefile
f83ccc3 Merge pull request #570 from smallstep/carl/arm6
e305940 Small docs cleanup
6f0f023 Small docs cleanup
08f9bc0 Merge pull request #567 from FibreFoX/master
9607691 Added missing hints for running step-ca on Raspberry Pi
877fc9a Add tests for CreateDecrypter
a3ec890 Fix small typo in divisible
54610e8 Improve error logging
d0a9cbc Change fmt to errors package for formatting errors
ff1b46c Add configuration option for specifying the minimum public key length
c04f556 Merge branch 'master' into hs/scep
68d5f6d Merge branch 'master' into hs/scep
2336936 Fix typo
9787728 Mask challenge password after it has been read
0487686 Merge branch 'master' into hs/scep
9447365 Merge branch 'master' into hs/scep
c3d9cef Update to v2.0.0 of github.com/micromdm/scep
2320d09 Add sync.WaitGroup for proper error handling in Run()
9bda3c4 Add more template data
b815478 Make serving SCEP endpoints optional
69d7010 Fix typo
c5e4ea0 Merge branch 'master' into hs/scep
65aab96 Add validation to SCEP Options
b97f024 Remove superfluous call to StoreCertificate
583d60d Address (most) PR comments
a526065 Merge branch 'master' into hs/scep
a4844fe Make tests green
9995208 Make tests not fail hard on ECDSA keys
e30084c Make linter happy
3e0dac3 Fix certificateChain property
e1cab49 Improve initialization of SCEP authority
8c5b12e Add non-TLS server and improve crypto.Decrypter interface
efd5501 Merge branch 'master' into hs/scep
538fe81 Fix linter issues
cc1ecb9 Store new certificates in database
47c2a82 Merge branch 'master' into hs/scep
9902dc1 Add signed failure responses
2536a08 Add support for configuring capabilities (cacaps)
e4d7ea8 Add support for challenge password
2d21b09 Remove some duplicate and unnecessary logic
99654f0 Merge branch 'master' into hs/scep
9df5f51 Change to a fixed fork of go.mozilla.org/pkcs7
3a5f633 Add support for multiple SCEP provisioners
2fc5a7f Improve SCEP API logic and error handling
a6d50f2 Remove x509 template from API
311c9d7 Add AuthorizeSign method to SCEP authority
4322933 Add handling of options
19f0397 Remove the copy of mozilla/pkcs7
7948f65 Merge branch 'master' into hs/scep
7ad90d1 Refactor initialization of SCEP authority
f871f81 Add full copy of mozilla/pkcs7 module as internal dependency
702032f Add number of certs to return and fix CR LF in CACaps
165f6a1 Improve setup for multiple SCEP providers (slightly)
78d7858 Add note about using a second (unsecured) server
9e43dc8 Merge branch 'master' into hs/scep-master
713b571 Refactor SCEP authority initialization and clean some code
ffdd58e Add rudimentary (and incomplete) support for SCEP

certificates - v0.15.16-rc3.test-arm6

Published by github-actions[bot] over 3 years ago

Changelog

fc31df3 Zip the windows release

certificates - v0.15.16-rc2.test-arm6

Published by github-actions[bot] over 3 years ago

Changelog

2a70ac2 Take 2 on arm6

certificates - Release v0.15.16-rc1.test-arm6

Published by github-actions[bot] over 3 years ago

certificates - v0.15.15

Published by github-actions[bot] over 3 years ago

Changelog

bc4bf22 [action] Add needs-triage labeler
0295280 Merge branch 'master' of https://github.com/smallstep/certificates
25325b6 Revert systemd renewer unit change that was incorrect
b9b1ac0 Merge pull request #562 from smallstep/renew-db-interface
5846314 Add missing Rekey method to the ca.Client
2cbaee9 Allow to use an alternative interface to store renewed certs.
582d6b1 Merge pull request #531 from smallstep/tls-tunnel
1328aa3 Fix review comments.
d3c6bcb Merge pull request #553 from smallstep/store-chain
e6833ec Add extension of db.AuthDB to store the fullchain.
50b9aae Add new identity tests.
e414d0c Fix unit tests.
c5234e9 Refactor tls tunnel connections.
180b5c3 Fix typo.
e75a940 Add experimental support for a TLS over TLS tunnel.
75f24a1 Sync cert renewer service with docs
e50c5bc Remove pronoun
3769a27 Merge pull request #543 from smallstep/no-nonce-on-get
2e1524e Remove the creation on nonce on get acme directory.
16c20c9 [action] codecov token not needed for public repos

certificates - v0.15.14

Published by github-actions[bot] over 3 years ago

Changelog

b7f8f15 Merge pull request #541 from smallstep/max/ver
78c1580 VERSION from ENV should always take precedence over CI tags

certificates - v0.15.13

Published by github-actions[bot] over 3 years ago

Changelog

7688ca1 Merge pull request #540 from smallstep/proxy-always
02a5879 Specify always a Proxy in all custom transports.

certificates - v0.15.12-rc5

Published by github-actions[bot] over 3 years ago

Changelog

335435d [action] debian rules syntax

certificates - v0.15.12-rc4

Published by github-actions[bot] over 3 years ago

Changelog

6a6be84 [action] debian rules syntax

certificates - Release v0.15.12-rc3

Published by github-actions[bot] over 3 years ago

certificates - v0.15.12-rc2

Published by github-actions[bot] over 3 years ago

Changelog

ee4d45c [action] remove make bootstrap from debian build process

certificates - v0.15.12-rc1

Published by github-actions[bot] over 3 years ago

Changelog

f02d97e [action] use matrix strategy in release.test | bump to 1.16
c71d56e [action] use go version matrix for the test / build step
fa9bcee [action] but golangci-lint timeout
819d466 [actions] update test action as well
42a470d Move golangci-lint to github action | update bootstrap
72217c9 GO111MODULE should not be necessary in bootstrap
79eb822 Change go get to go install in bootstrap ...
b724af3 Merge pull request #496 from smallstep/max/acme
6cfb9b7 Remove check of deprecated value
63ec2e3 Change Clock to empty struct in nosql/nosql | truncate > round
1ebfacc Merge pull request #534 from smallstep/match-all
672e3f9 Few ACME fixes ...
aea2a7c Update sshd_config.tpl to a Match all block.
7d119c2 Merge pull request #528 from smallstep/max/install
2fee0c9 Updates to README
ca1286a Merge pull request #525 from ionrover2/patch-1
6801cf3 Update provisioners.md
cdbdd74 Merge pull request #421 from dnwe/only-trace-for-kube-probe
2e0e62b add WriteError method for acme api
9aef84b remove unused nonce.clone method
440678c Add markInvalid arg to storeError for invalidating challenge
6b8585c PR review fixes / updates
bdace1e Add failure scenarios to db.CreateOrder unit tests
fd447c5 Fix small nbf->naf bug in db.CreateOrder
a785131 Fix lint issues
80c8567 change errnotfound type for getAccount
1831920 Finish order unit tests and remove unused mocklinker
b6ebc0f more unit tests
df05340 fixing broken unit tests
bdf4c0f add acme order unit tests
c0a9f24 add authorization and order unit tests
a584665 add tls-alpn-01 validate unit tests
a8e4bbf start Validate unit tests
1fb0f1d add storeError unit tests
8b4a5a6 add unit tests for dns01 validate
3612a0b gethttp01 validate unit tests working
7f9ffbd adding more acme nosql unit tests
88e6f00 nosql account db unit tests
ce13d09 add at to time attributes in dbAccount
f72b2ff [acme db interface] nosql authz unit tests
206909b [acme db interface] unit tests for challenge nosql db
4b1dda5 [acme db interface] tests
074ab7b [acme db interface] add linker tests
8d2ebcf [acme db interface] more unit tests
20b9785 [acme db interface] continuing unit test work
291fd5d [acme db interface] more unit tests
f71e27e [acme db interface] unit test progress
bb8d54e [acme db interface] unit tests compiling
f20fcae [acme db interface] wip unit test fixing
fc395f4 [acme db interface] compiles!
116869e [acme db interface] wip
80a6640 [acme db interface] wip
491c188 [acme db interface] wip
1135ae0 [acme db interface] wip
03ba229 [acme db interface] wip more errors
2ae43ef [acme db interface] wip errors
121cc34 [acme db interface] wip
461bad3 [acme db interface] wip
0368957 [acmedb] (wip)
31ad7f2 [acme] Continued work on acme db interface (wip)
3485955 Add new directory structure
0884321 Beginnings of acmeDB interface
9ee4441 Log successful /health requests at Trace lvl

certificates - v0.15.11

Published by github-actions[bot] over 3 years ago

Changelog

5249ce7 Merge pull request #516 from smallstep/ra-mode-improvements
84018ec Clarify comment.
8c8c160 Fix method name in comment.
a929710 Allow to configure the JWK using the encrypted key.
e727532 Fix wrong format of the first flag on step-ca --help
bdeb0cc Add support for the flag --issuer-password-file
71f59de Merge pull request #510 from smallstep/ra-mode
d9f93cc Fix typo.
edc7c4d Add support for password encrypted files
80542d6 Add JWK as an issuer for stepcas.
81428af Merge pull request #514 from gdbelvin/pin
341966c Check pin flag
9146fe8 Merge branch 'carl/sysd-update'
1ac8386 Add flag for setting the pin
ce3e6bf Fix linting errors.
0b8528c Allow mTLS revocation without provisioner.
96de4e6 Return a non-implemented error in stepcas.RenewCertificate.
348815f Fix error message.
e7a6c46 Fix linting errors.
08e75b6 Do not depend on Go 1.16.
6fd6270 Remove debug statements.
7958f6e Add support for lifetime.
ae4b8f5 Add support for emails, ips and uris.
561341a Update go.step.sm/crypto.
dbb48ec Add tests for stepcas.
bcf7020 Add support for revocation using an extra provisioner in the RA.
a6115e2 Add initial implementation of StepCAS.
9f0fce6 Quoting fix
2c09baf Two small systemd changes