x509

What would you like to be added

We can't query smallstep for anything related to certs because the only thing in the DB is the bytes of the cert. Storing the cert alongside more columns like the common name, not after date, and more, would let us enable more complex queries, and optimize performance for future use cases.

Why this is needed

Enable searching of Certificates signed by attrib

What would you like to be added

Add a step command to extract a crt and key from a .p12 file

Why this is needed

step certificate p12 can package a cert and keys to a .p12 file but there is not currently a way to extract the files once they are packaged.

Please add provider support for the "botan encryption" command and implement the needed AES operations with PKCS#11.
I could not find any command line tool that I can use for that. OpenSSL's PKCS#11 engine does not support AES either.

Tasks:

• add docs to token strategy (godoc)
• add links to the readme (api-key, bearer, x-header)