From 2cef8d10eedb425a12ef9b18f8b4cc60968ac0cc Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano.cano@gmail.com>
Date: Thu, 2 Feb 2023 14:48:34 -0800
Subject: [PATCH 1/2] Add changelog for v0.23.2

---
 CHANGELOG.md | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fc6e8872..360c3e9c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -27,15 +27,31 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## [v0.23.2] - 2023-02-02
+
+### Added
+
+- Added [`step-kms-plugin`](https://github.com/smallstep/step-kms-plugin) to
+  docker images, and a new image, `smallstep/step-ca-hsm`, compiled with cgo
+  (smallstep/certificates#1243).
+- Added [`scoop`](https://scoop.sh) packages back to the release
+  (smallstep/certificates#1250).
+- Added optional flag `--pidfile` which allows passing a filename where step-ca
+  will write its process id (smallstep/certificates#1251).
+
 ### Removed
 
 - The deprecated CLI utils `step-awskms-init`, `step-cloudkms-init`,
   `step-pkcs11-init`, `step-yubikey-init` have been removed.
   [`step`](https://github.com/smallstep/cli) and
   [`step-kms-plugin`](https://github.com/smallstep/step-kms-plugin) should be
-  used instead.
+  used instead (smallstep/certificates#1240).
 
-## [v0.23.1] - 2022-01-10
+### Fixed
+
+- Fixed remote management flags in docker images (smallstep/certificates#1228).
+
+## [v0.23.1] - 2023-01-10
 
 ### Added
 

From 6be15819d6960baa0fa45c9f4b724b6fcafa4cbd Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano.cano@gmail.com>
Date: Thu, 2 Feb 2023 14:54:11 -0800
Subject: [PATCH 2/2] Add new entries to changelog

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 360c3e9c..2ed67f97 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -38,6 +38,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
   (smallstep/certificates#1250).
 - Added optional flag `--pidfile` which allows passing a filename where step-ca
   will write its process id (smallstep/certificates#1251).
+- Added helpful message on CA startup when config can't be opened
+  (smallstep/certificates#1252).
+- Improved validation and error messages on `device-attest-01` orders
+  (smallstep/certificates#1235).
 
 ### Removed