rustls

Issues somebody may already be working on are listed last. List everything by date

• Lower the log level of "Illegal SNI extension: IP address presented as hostname"

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 70/100

  rustls/rustls#3432 · Opened Nov 15, 2026

  Maintainers usually reply within 1 day

• Tighten up CertificateSigningRequestParams.from_der() sig AlgorithmIdentifier params validation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  next-major-release

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  rustls/rcgen#461 · Opened Nov 14, 2026

• Can't create `RejectedEch` instance to resolve test coverage issue

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  rustls/rustls#3431 · Opened Nov 14, 2026

  Maintainers usually reply within 1 day

• Remove emSign Root CA - G1 certificate

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 65/100

  rustls/webpki-roots#140 · 1 comment · Opened Nov 13, 2026

• Allow longer initialization vectors to support the new AEGIS family of AEAD ciphers

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 55/100

  rustls/rustls#3428 · Opened Nov 13, 2026

  Maintainers usually reply within 1 day

• Clear the PEM parser's internal base64 buffers when the section is a private key

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 1-2 days Newbie friendliness 55/100

  rustls/pki-types#120 · Opened Nov 12, 2026

• Subject emailAddress isn't checked against rfc822Name constraints when the leaf has no subjectAltName

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 22/100

  rustls/webpki#551 · Opened Nov 9, 2026

• External signing and key-exchange handshake states

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 12/100

  rustls/rustls#3409 · 1 comment · 1 reaction · Opened Nov 2, 2026

  Maintainers usually reply within 1 day

• P-521 signature algorithms require the aws_lc_rs feature even for custom SigningKeys

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 30/100

  rustls/rcgen#460 · 1 comment · Opened Oct 31, 2026

• Verify Mozilla's signature in upki-mirror and sign manifests for `upki fetch`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 15/100

  rustls/upki#276 · 1 reaction · Opened Oct 31, 2026

  Maintainers usually reply within 1 day

• C API for rustls::quic (client side), for QUIC stacks such as ngtcp2 (curl HTTP/3)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  rustls/rustls-ffi#705 · 5 comments · Opened Oct 30, 2026

  Maintainers usually reply within 1 day

• `rustls-aws-lc-rs` pulls in `std` transitively via `aws-lc-rs`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  rustls/rustls#3373 · 3 comments · Opened Oct 20, 2026

  Maintainers usually reply within 1 day

• 0.23.x: buffered writes still return Ok(len) after TLS 1.2 confidentiality limit is reached (backport of #3332 error behavior?)

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  rustls/rustls#3366 · 2 comments · Opened Oct 17, 2026

  Maintainers usually reply within 1 day

• F-Droid doesn't trust the Kotlin archive

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  O-Android

  Difficulty 5/5 Over a week Newbie friendliness 12/100

  rustls/rustls-platform-verifier#260 · 4 comments · Opened Oct 9, 2026

• Prerelease for rustls 0.24?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  rustls/futures-rustls#33 · Opened Oct 2, 2026

• Good first issues?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  rustls/rustls#3316 · 1 comment · 1 reaction · Opened Oct 1, 2026

  Maintainers usually reply within 1 day

• `CertificateVerifier.verifyCertificateChain` on Android can cause `NetworkOnMainThreadException`

  May be free again A pull request for this issue was closed without being merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug O-Android

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  rustls/rustls-platform-verifier#256 · 5 comments · Opened Sep 30, 2026

• Dependency update request: support aws-lc-rs to 1.17

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  rustls/rustls#3269 · 2 comments · Opened Sep 14, 2026

  Maintainers usually reply within 1 day

• Android: Panics with unhelpful message when used in Termux

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  O-Android

  Difficulty 3/5 1-2 days Newbie friendliness 43/100

  rustls/rustls-platform-verifier#247 · 4 comments · Opened Aug 27, 2026

• Improve error message when denying subject name due to wildcard in public suffix

  May be free again @ctz claimed this 79 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  rustls/webpki#532 · 1 reaction · 1 assignee · Opened Aug 26, 2026

• Zeroise on drop for types containing private key material

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  next-major-release

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  rustls/pki-types#114 · 1 comment · Opened Aug 18, 2026

• OneCRL support

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  rustls/upki#229 · 1 comment · 8 reactions · Opened Aug 17, 2026

  Maintainers usually reply within 1 day

• Expose signature_algorithms_cert to ResolvesServerCert::resolve

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 52/100

  rustls/rustls#3214 · 4 comments · Opened Aug 13, 2026

  Maintainers usually reply within 1 day

• Consider all candidate CRLs

  May be free again @cpu claimed this 85 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  rustls/webpki#526 · 2 comments · 1 assignee · Opened Aug 12, 2026

• Converge config_ktls_{client,server} bounds to AsRawFd + AsyncRead + Unpin

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 68/100

  rustls/ktls#76 · 2 comments · Opened Aug 7, 2026

• Duplicate paths in `probe().cert_dir` on Arch Linux

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 58/100

  rustls/openssl-probe#50 · 4 comments · Opened Jul 24, 2026

• Discussion: Roadmap and future

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  rustls/upki#199 · 4 comments · 1 reaction · Opened Jul 17, 2026

  Maintainers usually reply within 1 day

• Remove dependency on `memoffset` when MSRV is bumped to 1.77+

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 52/100

  rustls/ktls#71 · 1 reaction · Opened Jul 7, 2026

• Dynamically set ECH configuration

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 45/100

  rustls/rustls#3119 · 7 comments · Opened Jul 4, 2026

  Maintainers usually reply within 1 day

• Align FIPS information exposed by rustls-aws-lc-rs to actual FIPS module version

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  rustls/rustls#3116 · 2 comments · Opened Jul 1, 2026

  Maintainers usually reply within 1 day

• Don't construct `EncodedMessage` in `MessageEncrypter`, `MessageDecrypter` impls

  May be free again @jny0444 claimed this 65 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 38/100

  rustls/rustls#3109 · 14 comments · 1 reaction · Opened Jun 25, 2026

  Maintainers usually reply within 1 day

• IPC API for use with containers

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  rustls/upki#171 · 5 comments · Opened Jun 24, 2026

  Maintainers usually reply within 1 day

• Look into HTTP Compression Dictionary Transport support for fetching

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 35/100

  rustls/upki#151 · Opened Jun 12, 2026

  Maintainers usually reply within 1 day

• Consider just-in-time fetching

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  rustls/upki#149 · 1 comment · Opened Jun 12, 2026

  Maintainers usually reply within 1 day

• Wrap TrustAnchor array items in AsRef<T>

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  rustls/webpki#505 · 5 comments · Opened Jun 6, 2026

• Merkle Tree Certificates support

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 30/100

  rustls/rustls#3079 · 1 comment · Opened Jun 3, 2026

  Maintainers usually reply within 1 day

• Release checklist

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  rustls/upki#137 · Opened May 27, 2026

  Maintainers usually reply within 1 day

• consider stabilizing `CryptoProvider`

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  rustls/rustls#3059 · 2 comments · Opened May 20, 2026

  Maintainers usually reply within 1 day

• Publish a rustls-platform-provider crate

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  rustls/rustls#3056 · 4 comments · Opened May 18, 2026

  Maintainers usually reply within 1 day

• Provide a runtime FIPS-restricted CryptoProvider in rustls' aws-lc-rs

  May be free again @ctz claimed this 109 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  rustls/rustls#3054 · 6 comments · 1 assignee · Opened May 14, 2026

  Maintainers usually reply within 1 day

• Could we cache `rustls-native-certs::load_native_certs()`?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 55/100

  rustls/rustls-platform-verifier#230 · 2 comments · Opened Apr 15, 2026

• /etc/ssl/certs/ca-bundle.crt no longer discovered on Linux

  May be free again A pull request for this issue was closed without being merged. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 35/100

  rustls/openssl-probe#48 · 2 comments · Opened Mar 30, 2026

• Use Java instead of Kotlin?

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  O-Android

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  rustls/rustls-platform-verifier#228 · 3 comments · Opened Mar 23, 2026

• 0.15 release planning

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 25/100

  rustls/rcgen#418 · 3 comments · Opened Mar 13, 2026

• Adding SymCrypt as a crypto provider

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  rustls/rcgen#414 · 7 comments · Opened Mar 5, 2026

• Some TLS handshake failed

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 30/100

  rustls/tokio-rustls#163 · 1 comment · Opened Mar 4, 2026

• rustls-platform-verifier doesn't work on termux

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug O-Android

  Difficulty 4/5 3-5 days Newbie friendliness 48/100

  rustls/rustls-platform-verifier#219 · 13 comments · 8 reactions · Opened Feb 7, 2026

• Email Name Constraints

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 45/100

  rustls/webpki#445 · 4 comments · Opened Feb 2, 2026

• Consider dependency on bincode

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 5/5 Over a week Newbie friendliness 35/100

  rustls/upki#33 · 1 comment · Opened Jan 8, 2026

  Maintainers usually reply within 1 day

• Think about what happens when `fetch` is run twice concurrently for a single cache directory

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 4/5 3-5 days Newbie friendliness 38/100

  rustls/upki#32 · 1 comment · Opened Jan 7, 2026

  Maintainers usually reply within 1 day