rustls/rcgen

Sign in to follow View on GitHub

Generate X.509 certificates, CSRs

Is rustls/rcgen beginner-friendly?

We have not seen enough recent pull requests from outside contributors to rustls/rcgen to say how often they are merged. No beginner-friendly issue is open right now; the list below has the other issues we hold for it.

Stars
516
Forks
160
Open beginner issues
0
Indexed issues
32
Dominant language
Rust
License
No license data
Last GitHub push
Oct 12, 2026
Latest indexed
Sep 20, 2026
No contributing guide
No code of conduct
Beginner labels
No beginner labels indexed
No merged PRs in 30d

How to contribute to rustls/rcgen

  1. There is no contributing guide, so start from the README and a few recently merged pull requests to see how changes are proposed.
  2. Follow the repository to hear when a new beginner-friendly issue opens, or look through the other issues below.
Beginner friendly Everything
Open All

Issues somebody may already be working on are listed last. List everything by date

  • Tighten up CertificateSigningRequestParams.from_der() sig AlgorithmIdentifier params validation
    Open
    • Is something wrong?
    next-major-release

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rcgen#461 ·

  • P-521 signature algorithms require the aws_lc_rs feature even for custom SigningKeys
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 30/100

    rustls/rcgen#460 · 1 comment ·

  • 0.15 release planning
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rcgen#418 · 3 comments ·

  • Adding SymCrypt as a crypto provider
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rcgen#414 · 7 comments ·

  • naming: `CertifiedKey` is confusing
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 42/100

    rustls/rcgen#391 · 3 comments · 1 reaction ·

  • `CertifiedIssuer::from_ca_cert_{pem,der}`?
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 42/100

    rustls/rcgen#375 · 2 comments · 1 reaction ·

  • Support for all RFC5280 standard extensions
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    rustls/rcgen#370 · 13 comments ·

  • Add conversion trait impls from `x509_parser::x509::X509Name` to `DistinguishedName`
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    rustls/rcgen#355 · 3 comments ·

  • How to Set or Remove the critical Flag on Key Usage or Extended Key Usage Extensions
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 42/100

    rustls/rcgen#353 · 3 comments ·

  • Cert embedding a X25519 pubkey, signed by an Ed25519 key (not self signed)
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    rustls/rcgen#351 · 8 comments ·

  • `cert::KeyPairAlgorithm` is not public
    May be free again Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 42/100

    rustls/rcgen#309 · 5 comments · 1 reaction ·

  • compiling for wasm
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 28/100

    rustls/rcgen#270 · 3 comments ·

  • Should key usages be tracked as a `HashSet` instead?
    Open
    • Is something wrong?
    next-major-release

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    rustls/rcgen#265 · 2 comments · 2 reactions ·

  • KeyPair::serialize_der() should yield PrivateKeyDer
    Open
    • Is something wrong?
    next-major-release

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    rustls/rcgen#260 · 1 comment · 1 reaction ·

  • KeyPair::from_pem detects incorrect algorithm?
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 42/100

    rustls/rcgen#193 · 6 comments ·

  • Deterministic certificates
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rcgen#173 · 23 comments · 1 reaction ·

  • Deduplicate testsuite
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rcgen#140 ·

  • Better interoperability with x509-parser
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rcgen#135 · 2 comments ·

  • X509v3 extensions from certificate not transferred to CSR
    May be free again Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rcgen#122 · 1 comment · 1 reaction ·

  • Do we have a complete example
    Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 45/100

    rustls/rcgen#110 · 4 comments · 2 reactions ·

  • Problem creating self signed cert with ECDSA algorithm and using as client identity in native-tls
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    rustls/rcgen#82 · 4 comments ·

  • rcgen should refuse emply subject_alt_names
    May be free again Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 45/100

    rustls/rcgen#73 · 2 comments ·

  • Basic Constraints certificate extension
    Open
    • Is something wrong?
    enhancement

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    rustls/rcgen#68 · 2 comments ·

  • Support all signature algorithms
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    rustls/rcgen#60 · 6 comments ·

  • Test that go accepts our generated certs and CSRs
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rcgen#34 ·

  • csr verification with openssl gives error for ed25519 certificates
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rcgen#11 · 2 comments ·

  • CertificateSigningRequestParams::from_der can parse the wrong key type
    Possibly taken Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 55/100

    rustls/rcgen#448 · 2 comments · 1 reaction ·

  • Support `CryptoProvider` like plugin mechanism
    Possibly taken Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rcgen#228 · 8 comments · 3 reactions ·

  • Allow CSR parsing to handle custom extensions
    Possibly taken Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rcgen#150 · 2 reactions ·

  • Support multiple DnValue per key in DistinguishedName
    Possibly taken Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 35/100

    rustls/rcgen#81 · 2 comments · 2 reactions ·

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.