rustls/webpki

Sign in to follow View on GitHub

WebPKI X.509 Certificate Validation in Rust

Is rustls/webpki beginner-friendly?

We have not seen enough recent pull requests from outside contributors to rustls/webpki to say how often they are merged. No beginner-friendly issue is open right now; the list below has the other issues we hold for it.

Stars
167
Forks
112
Open beginner issues
0
Indexed issues
20
Avg merge
4h 28m
Merged PRs (30d)
4
Dominant language
Rust
License
No license data
Last GitHub push
Nov 12, 2026
Latest indexed
Sep 20, 2026
Contributing guide
No code of conduct
Beginner labels
No beginner labels indexed

How to contribute to rustls/webpki

  1. Read the contributing guide first: it says how the maintainers want changes proposed, tested and reviewed.
  2. Follow the repository to hear when a new beginner-friendly issue opens, or look through the other issues below.
Beginner friendly Everything
Open All

Issues somebody may already be working on are listed last. List everything by date

  • Subject emailAddress isn't checked against rfc822Name constraints when the leaf has no subjectAltName
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 22/100

    rustls/webpki#551 ·

  • Improve error message when denying subject name due to wildcard in public suffix
    May be free again Open
    • Is something wrong?

    rustls/webpki#532 · 1 reaction · 1 assignee ·

  • Consider all candidate CRLs
    May be free again Open
    • Is something wrong?

    rustls/webpki#526 · 2 comments · 1 assignee ·

  • Wrap TrustAnchor array items in AsRef<T>
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 48/100

    rustls/webpki#505 · 5 comments ·

  • Email Name Constraints
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 45/100

    rustls/webpki#445 · 4 comments ·

  • Add option to skip certificate time validity check
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/webpki#420 · 8 comments ·

  • RFE: Stable C API and ABI
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 30/100

    rustls/webpki#405 · 3 comments ·

  • 0.104.x release planning
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 20/100

    rustls/webpki#377 ·

  • Integrate C2SP x509-limbo test suite
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 32/100

    rustls/webpki#206 · 1 comment · 4 reactions ·

  • Restore `GeneralDnsNameRef`, use in `GeneralName::DnsName`.
    Open
    • Is something wrong?
    breaking-change

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/webpki#183 ·

  • Support verifying/accessing SCTs inside certificates
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/webpki#105 ·

  • CRL optimization: verify CRL signatures once, up-front.
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 38/100

    rustls/webpki#81 · 1 comment ·

  • Deviations from RFC 5280
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 20/100

    rustls/webpki#70 · 3 reactions ·

  • Clean up overuse of BadDer
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 25/100

    rustls/webpki#38 ·

  • Consider using `Borrow`/`ToOwned` instead of `From`/`AsRef` for `DnsName` (and `SubjectName`)
    Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 25/100

    rustls/webpki#23 ·

  • Support URI in SAN
    Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 35/100

    rustls/webpki#9 · 16 comments · 1 reaction ·

  • Path building re-parses every intermediate on each budgeted call (unbudgeted CPU cost)
    Possibly taken Open
    • Is something wrong?

    Difficulty 3/5 1-2 days Newbie friendliness 72/100

    rustls/webpki#540 ·

  • Add opt-in support for ignoring URI name constraints
    Possibly taken Open
    • Is something wrong?

    Difficulty 4/5 3-5 days Newbie friendliness 45/100

    rustls/webpki#514 · 2 comments · 1 reaction ·

  • Complete and correct support for directoryName constraints
    Possibly taken Open
    • Is something wrong?

    Difficulty 5/5 Over a week Newbie friendliness 35/100

    rustls/webpki#19 · 3 comments · 1 reaction ·

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.