Issues

• ACME: option to fail http-01/tls-alpn-01 challenges on connection errors

  enhancementneeds triage
  smallstep/certificates#2804 · Filter by author Gauss23 opened on Sep 18, 2026

• [Bug]: SCEP response signing reuses the configured decrypter key, causing signature verification failures with FIPS-approved-only clients

  needs triage
  smallstep/certificates#2800 · Filter by author tarokon opened on Sep 17, 2026
  1

  

• [Docs]: Feature comparison link is broken

  needs triage
  smallstep/certificates#2788 · Filter by author bladeoflight16 opened on Sep 4, 2026

• Add --kty and --crv/--curve support to 'step ssh rekey'

  enhancementneeds triage
  smallstep/certificates#2731 · Filter by author PHSpline opened on Jul 6, 2026

• Bump vulnerable golang.org/x/crypto (v0.49.0) and golang.org/x/net (v0.52.0) in v0.30.2

  enhancementneeds triage
  smallstep/certificates#2730 · Filter by author areddy1213 opened on Jul 2, 2026

• OIDC provisioner unavailable after transient startup failure

  smallstep/certificates#2724 · Filter by author AWildLeon opened on Jun 24, 2026

• Quickstart command for PKI results in error about missing file

  smallstep/certificates#2723 · Filter by author tashian opened on Jun 23, 2026

• Post-Quantum Cryptography: ML-DSA certificate issuance and key generation (Go 1.27 crypto/mldsa now accepted)

  enhancementneeds triage
  smallstep/certificates#2717 · Filter by author netanmangal opened on Jun 21, 2026
  2

• [Bug]:TestBootstrapClientServerRotation: certificate has expired or is not yet valid: current time 2026-06-15T15:55:08Z is after 2026-06-15T15:55:08Z

  bugneeds triage
  smallstep/certificates#2713 · Filter by author jas4711 opened on Jun 16, 2026
  3

• [Bug]: Webserver not starting after upgrade to 0.30.2

  bugneeds triage
  smallstep/certificates#2704 · Filter by author ziller-hqs opened on Jun 8, 2026
  3

  

• ACME: Add support for DNS-PERSIST-01

  enhancementneeds triage
  smallstep/certificates#2697 · Filter by author kiler129 opened on May 31, 2026
  3

• Re-key with token authorization flow

  enhancementneeds triage
  smallstep/certificates#2689 · Filter by author Gagootron opened on May 21, 2026
  1

• [Bug]: ERROR: Cannot open database: unable to open database file

  bugneeds triage
  smallstep/certificates#2665 · Filter by author yangfande362 opened on Apr 24, 2026
  2

• Use template for CA API (and configurable subject encoding)

  enhancementneeds triage
  smallstep/certificates#2653 · Filter by author Gabgobie opened on Apr 17, 2026
  5

• Add a public provisioner method for standardized revoke token generation

  enhancementneeds triage
  smallstep/certificates#2651 · Filter by author skinnyh opened on Apr 14, 2026

• [Bug]: Step-CA accepts non-flattened JWS POST requests

  bugneeds triage
  smallstep/certificates#2642 · Filter by author Skyb0rg007 opened on Apr 12, 2026
  1

• [Bug]: Step CA 0.30.2 send malformed JSON reply for order list

  bugneeds triage
  smallstep/certificates#2629 · Filter by author hfp-is-owner opened on Mar 31, 2026
  

• [Bug]: dns-01 challenges should be validated against authoritative servers

  bugneeds triage
  smallstep/certificates#2619 · Filter by author sobjerke opened on Mar 25, 2026
  

• [Docs]: webhook.X509CertificateRequest and webhook.X509Certificate: is it safe to check only SANs, ignoring DNSNames, EmailAddresses, IPAddresses, URLs ?

  needs triage
  smallstep/certificates#2612 · Filter by author filimonic opened on Mar 21, 2026

• Enable Github's Immutable releases

  enhancementneeds triage
  smallstep/certificates#2608 · Filter by author Slamdunk opened on Mar 19, 2026
  

• [Bug]: The server will not issue certificates for the identifier / type : urn:ietf:params:acme:error:rejectedIdentifier

  bugneeds triage
  smallstep/certificates#2564 · Filter by author estuardoquan opened on Feb 10, 2026
  2

• Feature Request: Config file secrets via file paths

  enhancementneeds triage
  smallstep/certificates#2548 · Filter by author especially-relative opened on Jan 25, 2026
  1

• [Bug]: ACME server does not enforce termsOfServiceAgreed when termsOfService is configured

  bugneeds triage
  smallstep/certificates#2539 · Filter by author vkosuri opened on Jan 17, 2026
  9

• [Bug]: step-ca https certificate does not respect issuing CA's EKU

  bugneeds triage
  smallstep/certificates#2536 · Filter by author filimonic opened on Jan 14, 2026
  1

  

• webhook: add option to set up webhook authentication from ca.json

  enhancementneeds triage
  smallstep/certificates#2534 · Filter by author filimonic opened on Jan 13, 2026