rustls/rustls

Sign in to follow View on GitHub

A modern TLS library in Rust

Is rustls/rustls beginner-friendly?

In the last 30 days, rustls/rustls merged 20 of 32 pull requests from outside contributors, and its maintainers usually reply within 1 day. No beginner-friendly issue is open right now; the list below has the other issues we hold for it.

Stars
7.7k
Forks
947
Open beginner issues
0
Indexed issues
91
Avg merge
3d 11h
Merged PRs (30d)
46
Dominant language
Rust
License
No license data
Last GitHub push
Nov 12, 2026
Latest indexed
Sep 20, 2026
Contributing guide
Code of conduct
Beginner labels
No beginner labels indexed

How to contribute to rustls/rustls

  1. Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
  2. Read its code of conduct: it covers issues and pull requests as well as chat.
  3. Follow the repository to hear when a new beginner-friendly issue opens, or look through the other issues below.
Beginner friendly Everything
Open All

Issues somebody may already be working on are listed last. List everything by date

  • Lower the log level of "Illegal SNI extension: IP address presented as hostname"
    Open
    • Is something wrong?

    Difficulty 1/5 Under an hour Newbie friendliness 70/100

    rustls/rustls#3432 ·

    Maintainers usually reply within 1 day

  • Can't create `RejectedEch` instance to resolve test coverage issue
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 22/100

    rustls/rustls#3431 ·

    Maintainers usually reply within 1 day

  • Allow longer initialization vectors to support the new AEGIS family of AEAD ciphers
    Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 55/100

    rustls/rustls#3428 ·

    Maintainers usually reply within 1 day

  • External signing and key-exchange handshake states
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 12/100

    rustls/rustls#3409 · 1 comment · 1 reaction ·

    Maintainers usually reply within 1 day

  • `rustls-aws-lc-rs` pulls in `std` transitively via `aws-lc-rs`
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 48/100

    rustls/rustls#3373 · 3 comments ·

    Maintainers usually reply within 1 day

  • 0.23.x: buffered writes still return Ok(len) after TLS 1.2 confidentiality limit is reached (backport of #3332 error behavior?)
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    rustls/rustls#3366 · 2 comments ·

    Maintainers usually reply within 1 day

  • Good first issues?
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#3316 · 1 comment · 1 reaction ·

    Maintainers usually reply within 1 day

  • Dependency update request: support aws-lc-rs to 1.17
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#3269 · 2 comments ·

    Maintainers usually reply within 1 day

  • Expose signature_algorithms_cert to ResolvesServerCert::resolve
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 52/100

    rustls/rustls#3214 · 4 comments ·

    Maintainers usually reply within 1 day

  • Dynamically set ECH configuration
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    rustls/rustls#3119 · 7 comments ·

    Maintainers usually reply within 1 day

  • Align FIPS information exposed by rustls-aws-lc-rs to actual FIPS module version
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 55/100

    rustls/rustls#3116 · 2 comments ·

    Maintainers usually reply within 1 day

  • Don't construct `EncodedMessage` in `MessageEncrypter`, `MessageDecrypter` impls
    May be free again Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 38/100

    rustls/rustls#3109 · 14 comments · 1 reaction ·

    Maintainers usually reply within 1 day

  • Merkle Tree Certificates support
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    rustls/rustls#3079 · 1 comment ·

    Maintainers usually reply within 1 day

  • consider stabilizing `CryptoProvider`
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rustls#3059 · 2 comments ·

    Maintainers usually reply within 1 day

  • Publish a rustls-platform-provider crate
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rustls#3056 · 4 comments ·

    Maintainers usually reply within 1 day

  • Provide a runtime FIPS-restricted CryptoProvider in rustls' aws-lc-rs
    May be free again Open
    • Is something wrong?

    rustls/rustls#3054 · 6 comments · 1 assignee ·

    Maintainers usually reply within 1 day

  • RFE: support for system-wide crypto policies
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#2402 · 17 comments · 1 reaction ·

    Maintainers usually reply within 1 day

  • 0.24 tracking issue
    Open
    • Is something wrong?
    next-major-release

    Difficulty 5/5 Over a week Newbie friendliness 15/100

    rustls/rustls#2400 · 22 comments · 12 reactions ·

    Maintainers usually reply within 1 day

  • Session storage does not take ALPN into account?
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#2196 · 3 comments ·

    Maintainers usually reply within 1 day

  • Defend against crate feature-variant breaking API changes in CI
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    rustls/rustls#2190 · 2 comments · 2 reactions ·

    Maintainers usually reply within 1 day

  • Dependency Dashboard
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 15/100

    rustls/rustls#1990 ·

    Maintainers usually reply within 1 day

  • Server-side Encrypted Client Hello (ECH) support
    May be free again Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#1980 · 1 comment · 42 reactions ·

    Maintainers usually reply within 1 day

  • Poll-based encrypt/decrypt/sign API support in asynchronous and synchronous call
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rustls#1976 · 9 comments ·

    Maintainers usually reply within 1 day

  • unbuffered: B: `CapacityBuffer` for `output_tls.capacity()`
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#1880 · 9 comments ·

    Maintainers usually reply within 1 day

  • reduce bifurcation of library internals by using low-level API in high-level API
    May be free again Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#1723 · 11 comments ·

    Maintainers usually reply within 1 day

  • Improving performance of ServerSessionMemoryCache
    Open
    • Is something wrong?
    performance_enhancement

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rustls#1503 · 2 comments ·

    Maintainers usually reply within 1 day

  • Rebuilding connections from serializable parts
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 20/100

    rustls/rustls#1247 · 7 comments · 3 reactions ·

    Maintainers usually reply within 1 day

  • benchmark ServerSessionMemoryCache
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#1200 · 20 comments ·

    Maintainers usually reply within 1 day

  • Support for URI in SAN
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    rustls/rustls#1194 · 5 comments · 4 reactions ·

    Maintainers usually reply within 1 day

  • Improvements to client certificate support
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 48/100

    rustls/rustls#1164 · 11 comments ·

    Maintainers usually reply within 1 day

  • Support id-RSASSA-PSS certificates with PSS (cf. rsaEncryption with PSS)
    May be free again Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    rustls/rustls#1161 · 5 comments ·

    Maintainers usually reply within 1 day

  • How can we test disallowed states/behaviors for QUIC?
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#1011 · 2 comments ·

    Maintainers usually reply within 1 day

  • We should avoid setting 0-RTT state when we have no intention of doing 0-TT
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#1010 · 2 comments · 1 reaction ·

    Maintainers usually reply within 1 day

  • Clarify what happens when we receive `close_notify` before verifying Finished and/or peer identity
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#989 · 3 comments ·

    Maintainers usually reply within 1 day

  • Do we do the right thing when there's data after a `close_notify` alert?
    May be free again Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rustls#959 · 13 comments ·

    Maintainers usually reply within 1 day

  • CI/CD should warn about using Rust versions with known vulnerabilities
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#950 · 2 comments ·

    Maintainers usually reply within 1 day

  • ServerCertVerifier/ClientCertVerifier methods shouldn't return `rustls::Error`.
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#931 · 1 comment · 1 reaction ·

    Maintainers usually reply within 1 day

  • Restore the ability to access the certificate verifier through `ClientConfig`/`ServerConfig`
    Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 45/100

    rustls/rustls#921 · 4 comments · 1 reaction ·

    Maintainers usually reply within 1 day

  • Types from `internal::*` should not appear in public types
    Open
    • Is something wrong?

    Difficulty 2/5 1-3 hours Newbie friendliness 48/100

    rustls/rustls#920 · 20 comments · 1 reaction ·

    Maintainers usually reply within 1 day

  • Highlight always-taken branches (especially missing `else`) in code coverage metrics
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rustls#916 ·

    Maintainers usually reply within 1 day

  • Avoid code bloat due to unnecessary monomorphization
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#915 · 2 comments ·

    Maintainers usually reply within 1 day

  • Make a best effort to ensure we do what's needed to support atomic append of SSLKEYLOGFILE
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#912 · 2 comments ·

    Maintainers usually reply within 1 day

  • Lazily parse TLS vector contents to eliminate intermedaite `Vec` construction
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#907 · 1 comment ·

    Maintainers usually reply within 1 day

  • `emit_client_hello_for_retry` coding pattern is error-prone, especially race-prone
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#905 ·

    Maintainers usually reply within 1 day

  • Indicate support for supported signature algorithms in `CertificateStatusRequest`s
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/rustls#900 · 1 comment ·

    Maintainers usually reply within 1 day

  • Remove all use of `std::env` (for SSLKEYLOGFILE)
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/rustls#899 · 18 comments · 1 reaction ·

    Maintainers usually reply within 1 day

  • Replace `Error::*Error(String)` with non-heap-allocating localizable enum variants
    May be free again Open
    • Is something wrong?

    rustls/rustls#889 · 2 comments · 2 reactions · 1 assignee ·

    Maintainers usually reply within 1 day

  • Fallible allocation
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/rustls#886 · 19 comments ·

    Maintainers usually reply within 1 day

  • Support for Exported Authenticators
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 20/100

    rustls/rustls#876 · 2 reactions ·

    Maintainers usually reply within 1 day

  • Asynchronous calls to user-provided code
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 20/100

    rustls/rustls#850 · 13 comments · 6 reactions ·

    Maintainers usually reply within 1 day

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.