google/certificate-transparency-go

View on GitHub

Auditing for TLS certificates (Go code)

Stars: 1.2k
Forks: 322
Open beginner issues: 0
Indexed issues: 42
Avg merge: 3d 4h
Merged PRs (30d): 5

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Open All

42 open issues indexed

trillian: Implement per-root and per-intermediate rate limiting Open

enhancement

google/certificate-transparency-go#244 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Integration tests should use Docker image Open

enhancement

google/certificate-transparency-go#407 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Add Docker and Kubernetes configs for Migrillian Open

feature

google/certificate-transparency-go#515 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Don't error on unsupported leaf public keys Open

enhancement x509

google/certificate-transparency-go#531 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Kubernetes ConfigMap has an upper limit in size on GKE Open

enhancement

google/certificate-transparency-go#553 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Update pkcs11key to module version Open

blocked

google/certificate-transparency-go#614 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Possibility of splitting out the golang CT client into own repo/module Open

cleanup

google/certificate-transparency-go#637 · 8 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Expand and simplify the Migrillian README doc Open

documentation

google/certificate-transparency-go#704 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Alternative Endpoint for x509.ParsePKIXPublicKey that allows non-fatal errors Open

x509

google/certificate-transparency-go#740 · 0 comments · 3 reactions · 0 assignees · Indexed Sep 16, 2026
Begin testing against latest golang version Open

x509

google/certificate-transparency-go#765 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Update Apple SCT Policy for 2021/4/21 Open

help wanted

google/certificate-transparency-go#770 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
priv pub key encoding Open

google/certificate-transparency-go#780 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[bug] Darwin not considered a UNIX system? Open

x509

google/certificate-transparency-go#869 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Inconsistent license infomation for asn1 and x509 Open

x509

google/certificate-transparency-go#884 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
x509 Certificate verification with Common Name Open

x509

google/certificate-transparency-go#897 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Retriable errors and backoffs Open

google/certificate-transparency-go#898 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Refactor ctclient command-line tool Open

google/certificate-transparency-go#900 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Merge latest x509 and asn1 from upstream Open

x509

google/certificate-transparency-go#929 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
runtime error: slice bounds out of range Open

bug x509

google/certificate-transparency-go#941 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Document the x509 and asn1 packages Open

documentation x509

google/certificate-transparency-go#946 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Raw data in x509.Certificate does not equal RawLogEntry.Cert.Data for precertificates Open

google/certificate-transparency-go#950 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
The "cert / precert mismatch" error when submit an pre-cert Open

google/certificate-transparency-go#967 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Would it be possible to create a release container for trillian/ctfe/ct_server Open

google/certificate-transparency-go#985 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Allow lax parsing of keyUsage bit string Open

google/certificate-transparency-go#986 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
KMS/HSM support Open

feature help wanted

google/certificate-transparency-go#1056 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Race condition on creating a full chain for a certificate Open

google/certificate-transparency-go#1255 · 2 comments · 2 reactions · 1 assignee · Indexed Sep 16, 2026
Log gets spammed with "failed to read response body: context deadline exceeded " Open

google/certificate-transparency-go#1285 · 2 comments · 2 reactions · 1 assignee · Indexed Sep 16, 2026
Flaky cloudbuild test due to concurrent `go build ./...` Open

google/certificate-transparency-go#1529 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Missing Brainpool Curve Support in X509 Libraries Open

google/certificate-transparency-go#1594 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Build fails for darwin-amd64 with CGO_ENABLED=1 Open

google/certificate-transparency-go#1606 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Bazel build failed : compilepkg missing strict dependencies Open

google/certificate-transparency-go#1653 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Expired certificate in root_darwin_armx.go Open

google/certificate-transparency-go#1655 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Add support for tiled logs to ctclient Open

google/certificate-transparency-go#1669 · 7 comments · 2 reactions · 1 assignee · Indexed Sep 16, 2026
Switch to AWS SDK v2 before v1 is end-of-support/EOL on July 31, 2025 - CT Open

google/certificate-transparency-go#1673 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
jsonclient backoff is never reset Open

google/certificate-transparency-go#1696 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Add support for STH-based validation when using `--size` flag Open

google/certificate-transparency-go#1708 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Submission library redesign Open

google/certificate-transparency-go#1739 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
ct_server: require explicit opt-in for plaintext gRPC to Trillian backends Open

google/certificate-transparency-go#1759 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
SSRF via unvalidated AIA/CRL URLs in certificate extensions (sctcheck, certcheck, crlcheck, fixchain) Open

google/certificate-transparency-go#1775 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
CT-Go x509 wildcard SAN excluded nameConstraints bypass Open

google/certificate-transparency-go#1809 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Certificate parser accepts signatures with non-whole number of bytes Open

google/certificate-transparency-go#1817 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Chain verification fails certificates with ML-DSA signatures Open

google/certificate-transparency-go#1826 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

google/certificate-transparency-go

Get new issues in your inbox