Issues

• step certificate lint: a --profile flag, and retiring the zlint/zcrypto forks

  enhancementneeds triage
  smallstep/cli#1723 · Filter by author edmundlod opened on Oct 21, 2026

• Use --kms for revocation using X5C provisioner

  enhancementneeds triage
  smallstep/cli#1713 · Filter by author WhatANiceChick opened on Sep 28, 2026

• build s390x and riscv64 binaries

  enhancementneeds triage
  smallstep/cli#1710 · Filter by author upodroid opened on Sep 24, 2026
  1

• [Bug]: step ca provisioner add --ca-config requires --ca-url/--root even for purely local/offline edits

  bugneeds triage
  smallstep/cli#1705 · Filter by author a-monahan opened on Sep 16, 2026

• [Bug]: step ca renew --force incorrectly invokes step-kms-plugin on Debian 12

  bugneeds triage
  smallstep/cli#1704 · Filter by author subs-comps-git opened on Sep 15, 2026

• iOS support

  enhancementneeds triage
  smallstep/cli#1694 · Filter by author A-tA-v opened on Aug 28, 2026
  1

• [Bug]: step prints KMS URI secrets (pin-value, etc.) in cleartext when step-kms-plugin fails

  bugneeds triage
  smallstep/cli#1668 · Filter by author TicketWindowSeat opened on Jul 18, 2026

• Add attestation file as a release artifact

  enhancementneeds triage
  smallstep/cli#1653 · Filter by author udf2457 opened on Jun 11, 2026

• [Bug]: step ca renew --daemon caches keypair at startup; produces cert/key mismatch after external key replacement

  bugneeds triage
  smallstep/cli#1632 · Filter by author euvitudo opened on May 21, 2026

• Please add support for ssh-add -c to step ssh login

  enhancementneeds triage
  smallstep/cli#1611 · Filter by author dionorgua opened on Apr 9, 2026
  1

• Enhancement: Please pass raw certificate in json output of step certificate inspect

  enhancementneeds triage
  smallstep/cli#1609 · Filter by author Houlistonm opened on Apr 3, 2026
  1

• Subject order and missing DC attributes when signing intermediate CA with smallstep (Microsoft CA compatibility issue)

  enhancementneeds triage
  smallstep/cli#1606 · Filter by author JannikZorn opened on Apr 1, 2026
  2

• systemd examples lack sandboxing options

  enhancementneeds triage
  smallstep/cli#1588 · Filter by author kaysond opened on Mar 11, 2026

• [Bug]: step certificate inspect on a p12 or pfx file results in error "invalid PEM block"

  bugneeds triage
  smallstep/cli#1573 · Filter by author YANSA23 opened on Feb 25, 2026
  1

  

• Wrapper for step ca renew that behaves sanely with systemd

  smallstep/cli#1549 · Filter by author Torstein-Eide opened on Jan 13, 2026
  7

• step ca renew doesn't handle quoted arguments in --exec parameter

  enhancementneeds triage
  smallstep/cli#1538 · Filter by author backerman opened on Dec 20, 2025

• [Bug]: Step-cli: error generating OIDC token: exec "step oauth" failed

  bugneeds triage
  smallstep/cli#1521 · Filter by author Gauss23 opened on Nov 24, 2025
  2

  

• Add command to issue context-specific x509 auth

  enhancementneeds triage
  smallstep/cli#1509 · Filter by author MaxwellDPS opened on Oct 29, 2025
  

• [Bug]: notBefore and notAfter values in template files are ignored

  bugneeds triage
  smallstep/cli#1507 · Filter by author dncman opened on Oct 22, 2025 · v0.31.1
  2

  

• step certificate inspect should support using StartTLS

  enhancementneeds triage
  smallstep/cli#1479 · Filter by author polarathene opened on Aug 27, 2025
  1

  

• Option to write 'identity' and 'provisioner' during bootstrap

  enhancementneeds triage
  smallstep/cli#1455 · Filter by author DenisMkS opened on Jul 14, 2025
  

• "step ca certificate" works with PKCS11

  enhancementneeds triage
  smallstep/cli#1443 · Filter by author yangfande362 opened on Jun 22, 2025
  3

  

• Add step certificate unbundle subcommand for separating certificate chains

  enhancementneeds triage
  smallstep/cli#1437 · Filter by author dopey opened on Jun 11, 2025
  3

  

• Allow step ca certificate to read token from a file

  enhancementgood first issueneeds triage
  smallstep/cli#1435 · Filter by author Alxandr opened on Jun 8, 2025
  2

• Parameters --cert-not-after and --cert-not-before of step ca token for non-ssh certificates

  enhancementneeds triage
  smallstep/cli#1410 · Filter by author PreterPant opened on Apr 16, 2025
  2