cloudflare/cfssl

View on GitHub

CFSSL: Cloudflare's PKI and TLS toolkit

Stars: 9.5k
Forks: 1.2k
Open beginner issues: 0
Indexed issues: 273

Dominant language: Go
License: BSD-2-Clause
Last GitHub push: Apr 17, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted
PR merge metrics: No merged PRs in 30d

Open All

273 open issues indexed

PKCS #12 file generation for client certificates Open

cloudflare/cfssl#61 · 5 comments · 6 reactions · 0 assignees · Indexed Sep 15, 2026
Move away from testing against live sites in bundler/bundle_from_remote_test.go Open

cloudflare/cfssl#96 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add tests to validate `serve` command API Open

cloudflare/cfssl#100 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Enable both authenticated and unauthenticated sign endpoints when valid Open

cloudflare/cfssl#107 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add support for creating dummy certificates, servers, etc. when testing Open

feature

cloudflare/cfssl#117 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support PKCS#11 in multiroot CA Open

feature

cloudflare/cfssl#121 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support PKCS#11 in OCSP signer Open

feature

cloudflare/cfssl#122 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add profile information into info endpoint Open

enhancement

cloudflare/cfssl#162 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Add support for the info endpoint to take a GET request Open

architecture deferred enhancement

cloudflare/cfssl#164 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Provide warning in Scan for certificate expiration dates that cause browser warnings (expiration in 2016) Open

enhancement

cloudflare/cfssl#178 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Mysterious warnings in Scan Open

enhancement

cloudflare/cfssl#198 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add asymmetric auth provider Open

architecture feature

cloudflare/cfssl#220 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
mkbundle naming collision with Ubuntu mono-devel package Open

documentation

cloudflare/cfssl#223 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Reject signing requests where notAfter > intermediate notAfter Open

enhancement

cloudflare/cfssl#225 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
auth_keys are ignored on http endpoints? Open

bug

cloudflare/cfssl#250 · 4 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Does not handle default text on "scan" page correctly Open

cloudflare/cfssl#300 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Scan should determine if the site is available without SNI Open

review

cloudflare/cfssl#313 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add a severity legend to scan UI Open

enhancement review

cloudflare/cfssl#317 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Add option to whitelist KeyUsage/ExtendedKeyUsage Open

help wanted question review

cloudflare/cfssl#385 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
OCSP Responder doesn't work right for paths other than "/" Open

review

cloudflare/cfssl#387 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add DNSSEC/DANE checking to Scan Open

feature review

cloudflare/cfssl#410 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add CT scanning to scan Open

feature review

cloudflare/cfssl#411 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support CT log checking in scan Open

deferred enhancement

cloudflare/cfssl#441 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add HTTP/2 and SPDY reporting Open

deferred enhancement

cloudflare/cfssl#444 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Request: example of generating token & json for authsign api Open

documentation

cloudflare/cfssl#460 · 7 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Implement JWT-based auth Open

feature review

cloudflare/cfssl#509 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Responder should return unauthorized for a response with NextUpdate in the past Open

cloudflare/cfssl#530 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Responder should support NextPublish in caching behavior Open

cloudflare/cfssl#536 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Use jmhodges/clock for OCSP signer Open

cloudflare/cfssl#558 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Secure CA private key storage Open

cloudflare/cfssl#563 · 12 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[Re]generating CA hierarchy Open

cloudflare/cfssl#565 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`CheckSignatureFrom` needs tests Open

needs-more-testing

cloudflare/cfssl#573 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Default auth_key value in cfssl serve config does not propagate to individual profiles Open

bug documentation

cloudflare/cfssl#581 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Connect OCSP service to CertDB in order to send responses Open

cloudflare/cfssl#596 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
JSON format documentation Open

documentation

cloudflare/cfssl#598 · 4 comments · 10 reactions · 0 assignees · Indexed Sep 15, 2026
Unable to set multiple OUs in the "names" field Open

build enhancement

cloudflare/cfssl#599 · 13 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Revoking certs through the API Open

enhancement

cloudflare/cfssl#604 · 12 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bundler ubiquity - Chrome or Android 2.2? Open

cloudflare/cfssl#612 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Download page urls should conform to some standard. Open

enhancement

cloudflare/cfssl#615 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`Unknown private key error` when using a remote auth config Open

cloudflare/cfssl#624 · 14 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Consider adding support for generating Diffie-Hellman parameters Open

deferred feature help wanted

cloudflare/cfssl#625 · 2 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
domainComponent (DC) RDN not included in subject of signed certificate Open

cloudflare/cfssl#632 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
cfssl ocsprefresh spit database error Open

cloudflare/cfssl#636 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Merkle_tree.h doesn't exist Open

cloudflare/cfssl#648 · 4 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Wrong database scheme at mysql goose migrations-scripts Open

bug help wanted

cloudflare/cfssl#649 · 5 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
policy violation error when creating intermediate CA with profile intermediate Open

cloudflare/cfssl#657 · 18 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Proposal: Integrate Keystone based authenticator Open

cloudflare/cfssl#658 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Documentation and examples Open

documentation

cloudflare/cfssl#660 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CRL Generation Open

enhancement

cloudflare/cfssl#661 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
"unable to open database file" using sqlite db Open

cloudflare/cfssl#670 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

cloudflare/cfssl

Get new issues in your inbox