Michael Malone

Make it easier to include SCEP challenge password in a CSR

2

The SCEP protocol includes the "challenge password" (for authenticating the SCEP certificate request) in the CSR. Right now it's pretty tricky to generate a CSR that will work with SCEP....

Like the `--install` flag on `step ca bootstrap`, this flag would automatically run `step certificate install` on the root certificate in your system's trust store (but without doing any other...

`step certificate inspect` does not show email name constraints

2

The `step certificate inspect` subcommand should show name constraints on email addresses (and IP addresses, etc). To reproduce: ``` step certificate inspect

Subcommand to fetch SSH root without configuring OpenSSH

5

We should have a subcommand that grabs the SSH client / host cert from the CA (using the fingerprint) without doing the OpenSSH configuration stuff. This would be useful if...

Subcommand to create SSH CA host & user root certificates & keys

2

We don't currently have any way to create a host / user root certificate for SSH. You'd need this to rotate your root certificate, or if you run `step ca...