cloudflare/cfssl

View on GitHub

CFSSL: Cloudflare's PKI and TLS toolkit

Stars: 9.5k
Forks: 1.2k
Open beginner issues: 0
Indexed issues: 273

Dominant language: Go
License: BSD-2-Clause
Last GitHub push: Apr 17, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted
PR merge metrics: No merged PRs in 30d

Open All

273 open issues indexed

Inserting Root Certificate into Database Fails Due to Missing AKI Open

cloudflare/cfssl#1385 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Where i can find a full csr example file and a full config example file Open

cloudflare/cfssl#1388 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Issue with SANs Storage in Database: Only Domain Names are Saved Open

cloudflare/cfssl#1389 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Email override is ignored for a signing request Open

cloudflare/cfssl#1392 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Is the cfssl repo still being maintained? There hasn't been any action on recent PRs. Open

cloudflare/cfssl#1397 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
"Failed to parse input: unexpected end of JSON input" err occured on MAC os of M2 silicon Open

cloudflare/cfssl#1399 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
virus alert on virustotal Open

cloudflare/cfssl#1400 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Updating ComputeSKI to use SHA-256 instead of SHA-1. Open

cloudflare/cfssl#1401 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
signed certs have empty AKI? Open

cloudflare/cfssl#1403 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Purpose of the `HOSTNAME` argument in the `cfssl selfsign` command Open

cloudflare/cfssl#1404 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[help] A question about the value of the subject.names.* field of pem certificates Open

cloudflare/cfssl#1405 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
darwin arm64 binaries not provided for secondary binaries Open

cloudflare/cfssl#1407 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Github action for golangci lint has typecheck errors Open

github_actions

cloudflare/cfssl#1411 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The x509sha1 GODEBUG setting has been removed with go1.24, tests relying on sha1 certificates will fail when running with >= go1.24 Open

tests

cloudflare/cfssl#1413 · 13 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CRL Endpoint to return raw | binary | application/pkix-crl response Open

cloudflare/cfssl#1417 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
key cannot be loaded due to wrong format Open

cloudflare/cfssl#1421 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
PKCS#7 `ParsePKCS7()` fails to decode degenerate SignedData Open

cloudflare/cfssl#1425 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Restrict TLS version not working Open

cloudflare/cfssl#1429 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CFSSL for win7 Open

cloudflare/cfssl#1433 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
crl_override (and extensions) in /api/v1/sign request body are silently ignored by the HTTP API Open

cloudflare/cfssl#1439 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support Go native FIPS 140 mode (GODEBUG=fips140=only) Open

cloudflare/cfssl#1441 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support ML-DSA (FIPS 204) post-quantum signature algorithms for certificate signing Open

cloudflare/cfssl#1443 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
> I couldn't figure out how to report an issue regarding this so I opened a PR. Open

cloudflare/cfssl#1446 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

cloudflare/cfssl

Get new issues in your inbox