Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

cloudflare/cfssl

Sign in to follow View on GitHub

CFSSL: Cloudflare's PKI and TLS toolkit

Is cloudflare/cfssl beginner-friendly?

In the last 30 days, cloudflare/cfssl merged 2 of 11 pull requests from outside contributors, and its maintainers usually reply within 2 days. 2 beginner-friendly issues are open now.

Stars
9.5k
Forks
1.2k
Open beginner issues
2
Indexed issues
277
Avg merge
12h 48m
Merged PRs (30d)
2
Dominant language
Go
License
BSD-2-Clause
Last GitHub push
Oct 6, 2026
Latest indexed
Sep 15, 2026
Contributing guide
Code of conduct
Beginner labels
help wanted

How to contribute to cloudflare/cfssl

  1. Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
  2. It ships a Dockerfile or Docker Compose file, so you can run it without installing its whole toolchain.
  3. Read its code of conduct: it covers issues and pull requests as well as chat.
  4. Pick one of the 2 open beginner-friendly issues below and comment that you want to work on it before you start.
Beginner friendly Everything
Open All

Issues somebody may already be working on are listed last. List everything by date

  • > I couldn't figure out how to report an issue regarding this so I opened a PR.
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 48/100

    cloudflare/cfssl#1446 ·

    Maintainers usually reply within 2 days

  • Support ML-DSA (FIPS 204) post-quantum signature algorithms for certificate signing
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    cloudflare/cfssl#1443 · 4 comments ·

    Maintainers usually reply within 2 days

  • Support Go native FIPS 140 mode (GODEBUG=fips140=only)
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 48/100

    cloudflare/cfssl#1441 ·

    Maintainers usually reply within 2 days

  • CFSSL for win7
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 20/100

    cloudflare/cfssl#1433 ·

    Maintainers usually reply within 2 days

  • Restrict TLS version not working
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    cloudflare/cfssl#1429 ·

    Maintainers usually reply within 2 days

  • PKCS#7 `ParsePKCS7()` fails to decode degenerate SignedData
    May be free again Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 48/100

    cloudflare/cfssl#1425 · 1 comment ·

    Maintainers usually reply within 2 days

  • key cannot be loaded due to wrong format
    May be free again Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    cloudflare/cfssl#1421 · 1 comment ·

    Maintainers usually reply within 2 days

  • Github action for golangci lint has typecheck errors
    Open
    • Is something wrong?
    github_actions

    Difficulty 3/5 1-2 days Newbie friendliness 30/100

    cloudflare/cfssl#1411 · 1 comment ·

    Maintainers usually reply within 2 days

  • darwin arm64 binaries not provided for secondary binaries
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    cloudflare/cfssl#1407 · 1 comment · 1 reaction ·

    Maintainers usually reply within 2 days

  • [help] A question about the value of the subject.names.* field of pem certificates
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 25/100

    cloudflare/cfssl#1405 ·

    Maintainers usually reply within 2 days

  • Purpose of the `HOSTNAME` argument in the `cfssl selfsign` command
    Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 35/100

    cloudflare/cfssl#1404 · 1 comment ·

    Maintainers usually reply within 2 days

  • signed certs have empty AKI?
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    cloudflare/cfssl#1403 ·

    Maintainers usually reply within 2 days

  • virus alert on virustotal
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 15/100

    cloudflare/cfssl#1400 · 1 comment ·

    Maintainers usually reply within 2 days

  • "Failed to parse input: unexpected end of JSON input" err occured on MAC os of M2 silicon
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    cloudflare/cfssl#1399 · 1 comment · 1 reaction ·

    Maintainers usually reply within 2 days

  • Is the cfssl repo still being maintained? There hasn't been any action on recent PRs.
    Open
    • Is something wrong?

    Difficulty 1/5 Under an hour Newbie friendliness 15/100

    cloudflare/cfssl#1397 · 3 comments · 1 reaction ·

    Maintainers usually reply within 2 days

  • Issue with SANs Storage in Database: Only Domain Names are Saved
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    cloudflare/cfssl#1389 · 1 comment ·

    Maintainers usually reply within 2 days

  • Where i can find a full csr example file and a full config example file
    Open
    • Is something wrong?

    Difficulty 1/5 Under an hour Newbie friendliness 20/100

    cloudflare/cfssl#1388 · 1 comment ·

    Maintainers usually reply within 2 days

  • Inserting Root Certificate into Database Fails Due to Missing AKI
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    cloudflare/cfssl#1385 ·

    Maintainers usually reply within 2 days

  • window bug
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 15/100

    cloudflare/cfssl#1382 ·

    Maintainers usually reply within 2 days

  • [Feature Request] Allow loading signing config from environment variable
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    cloudflare/cfssl#1376 · 3 reactions ·

    Maintainers usually reply within 2 days

  • Right Way to Implement Multiple Intermediate CAs in CFSSL
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    cloudflare/cfssl#1373 · 1 comment ·

    Maintainers usually reply within 2 days

  • undefined: strings.CutPrefix
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 25/100

    cloudflare/cfssl#1370 · 3 comments · 3 reactions ·

    Maintainers usually reply within 2 days

  • Support for Strict-Transport-Security HTTP on API server
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    cloudflare/cfssl#1361 ·

    Maintainers usually reply within 2 days

  • Error when using multirootca with sqlite db
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 32/100

    cloudflare/cfssl#1348 · 1 comment ·

    Maintainers usually reply within 2 days

  • Right way to create an intermediate certificate authority which is created through CLI without db connection
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 20/100

    cloudflare/cfssl#1339 ·

    Maintainers usually reply within 2 days

  • 为什么没有 cfssljson_1.6.4_darwin_arm64呢
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    cloudflare/cfssl#1335 · 2 reactions ·

    Maintainers usually reply within 2 days

  • timestamp column not compatible with 2038+ dates
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 42/100

    cloudflare/cfssl#1329 ·

    Maintainers usually reply within 2 days

  • Limiting API request size
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    cloudflare/cfssl#1328 ·

    Maintainers usually reply within 2 days

  • Removal of e-Tugra root certificate
    Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 45/100

    cloudflare/cfssl#1319 ·

    Maintainers usually reply within 2 days

  • My windows system has already imported the nginx certificate, why is it still unsafe?
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 20/100

    cloudflare/cfssl#1315 ·

    Maintainers usually reply within 2 days

  • Only receive cfssl version 1.2.0 on Raspberry Pi 4
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    cloudflare/cfssl#1314 · 3 comments ·

    Maintainers usually reply within 2 days

  • CreateCRL has been Deprecated: this method does not generate an RFC 5280 conformant X.509 v2 CRL.
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    cloudflare/cfssl#1308 · 1 reaction ·

    Maintainers usually reply within 2 days

  • Different certinfo output for versions from `brew` and released binary
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 42/100

    cloudflare/cfssl#1307 ·

    Maintainers usually reply within 2 days

  • cfssl runtime error: invalid memory address or nil pointer dereference
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    cloudflare/cfssl#1286 ·

    Maintainers usually reply within 2 days

  • github.com/zmap/zcrypto
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    cloudflare/cfssl#1284 · 4 comments ·

    Maintainers usually reply within 2 days

  • Logging hostname and alternative names
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 38/100

    cloudflare/cfssl#1283 ·

    Maintainers usually reply within 2 days

  • CSR JSON supports specifying custom extensions, but selfsign ignores them
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 38/100

    cloudflare/cfssl#1280 ·

    Maintainers usually reply within 2 days

  • the CA cert's SAN extensions not include DNSName.
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    cloudflare/cfssl#1276 · 5 comments · 1 reaction ·

    Maintainers usually reply within 2 days

  • Feature Request: Generate OpenAPI spec for the API to help development of clients
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    cloudflare/cfssl#1275 · 2 reactions ·

    Maintainers usually reply within 2 days

  • [feat req] implement authenticode signing server
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    cloudflare/cfssl#1271 ·

    Maintainers usually reply within 2 days

  • help / feature request - certinfo for remote server with chain
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    cloudflare/cfssl#1269 ·

    Maintainers usually reply within 2 days

  • How to programatically create create CA and key/cert using initca
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 25/100

    cloudflare/cfssl#1266 ·

    Maintainers usually reply within 2 days

  • cfssljson not parsing bundle output
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    cloudflare/cfssl#1263 · 1 reaction ·

    Maintainers usually reply within 2 days

  • how to extend the term of CA validity?
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    cloudflare/cfssl#1261 · 2 comments ·

    Maintainers usually reply within 2 days

  • gencert with -initca ignores most config arguments
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    cloudflare/cfssl#1253 ·

    Maintainers usually reply within 2 days

  • Own HTTP server
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    cloudflare/cfssl#1252 ·

    Maintainers usually reply within 2 days

  • Unable to sing CSR using the PKCS11 module
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    cloudflare/cfssl#1234 ·

    Maintainers usually reply within 2 days

  • csr hosts
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    cloudflare/cfssl#1232 · 1 comment ·

    Maintainers usually reply within 2 days

  • Linting is broken starting with Go 1.17+
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    cloudflare/cfssl#1230 ·

    Maintainers usually reply within 2 days

  • cfssl certinfo should be pipeable into cfssl genkey -
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    cloudflare/cfssl#1229 · 1 comment ·

    Maintainers usually reply within 2 days

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.