letsencrypt/boulder

View on GitHub

An ACME-based certificate authority, written in Go.

Stars: 5.8k
Forks: 649
Open beginner issues: 0
Indexed issues: 205
Avg merge: 3d 23h
Merged PRs (30d): 24

Dominant language: Go
License: MPL-2.0
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

205 open issues indexed

mtc: figure out how to gate order "ready" status on availability of subtree signatures Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

letsencrypt/boulder#9022 · Opened Sep 11, 2026
genmtpki: use RELATIVE-OID encoding Open

letsencrypt/boulder#9021 · 1 assignee · Opened Sep 11, 2026
mtca: calculate and write subtrees Open

Difficulty 5/5 Over a week Newbie friendliness 39/100

letsencrypt/boulder#9020 · Opened Sep 11, 2026
Differentiate errors when the DNS resolver is unreachable versus a DNS error during validation Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#9018 · Opened Sep 11, 2026
Shrink size of CA issuance logs Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#9015 · Opened Sep 9, 2026
Expire orders and authzs after too much time processing Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#9013 · Opened Sep 8, 2026
Support ECH during http-01 and tls-alpn-01 validation Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#9009 · Opened Sep 3, 2026
CI Nits and Improvements Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#9006 · Opened Sep 2, 2026
Consider logging the SPKI hash at issuance time for easier log searches Open

letsencrypt/boulder#9002 · 1 assignee · Opened Sep 1, 2026
admin: consider a new "unblock key" subcommand Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

letsencrypt/boulder#9001 · Opened Sep 1, 2026
admin: give better previews of key blocking actions Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

letsencrypt/boulder#9000 · Opened Sep 1, 2026
treedb: deeper integration with mtca Open

letsencrypt/boulder#8998 · 1 assignee · Opened Sep 1, 2026
mtca/mtpublisher: store signed note lines in `checkpoints` table Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8991 · Opened Aug 28, 2026
PA: Streamline policy file loading Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

letsencrypt/boulder#8985 · Opened Aug 26, 2026
Remove fallback code and require SAReadOnlyService once it's in Prod crl-updater/storer configs Open

Difficulty 4/5 3-5 days Newbie friendliness 62/100

letsencrypt/boulder#8983 · Opened Aug 26, 2026
sa: stop writing to `issuedNames` table Open

letsencrypt/boulder#8982 · 1 assignee · Opened Aug 25, 2026
cert-checker: consume MTC logs Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

letsencrypt/boulder#8981 · Opened Aug 25, 2026
Instrument MTCA and MTPublisher with metrics and logs Open

letsencrypt/boulder#8980 · 1 comment · 1 assignee · Opened Aug 25, 2026
va: Validate Persistent DCV TXT Record parameter tags per RFC 8659 Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

letsencrypt/boulder#8979 · 1 reaction · Opened Aug 25, 2026
sa.UpdateRegistrationKey: take previous key as input to ensure atomicity Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#8959 · Opened Aug 19, 2026
va: Inaccurate "Redirect loop detected" error message with redirect + connectivity issues(?) Open

letsencrypt/boulder#8949 · 2 comments · 1 assignee · Opened Aug 16, 2026
Switch SFE to use oauth for zendesk integration Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8936 · Opened Aug 11, 2026
Reconcile RA "background" task timeouts. Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8931 · Opened Aug 3, 2026
Create new MTCA ceremony type Open

letsencrypt/boulder#8919 · 1 assignee · Opened Jul 28, 2026
mtca: build standalone certificates Open

letsencrypt/boulder#8918 · 1 assignee · Opened Jul 28, 2026
mtca: Start using trees/cosginature in mtca Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

letsencrypt/boulder#8917 · Opened Jul 28, 2026
tiles: build MTCProof from tiles Open

letsencrypt/boulder#8914 · 1 comment · 1 assignee · Opened Jul 28, 2026
sa/ra: store mtcLogID and mtcEntryIndex on order objects Open

letsencrypt/boulder#8912 · 4 comments · 1 assignee · Opened Jul 28, 2026
mtca: improve tile writing performance Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8903 · Opened Jul 24, 2026
mtca: crash recovery Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

letsencrypt/boulder#8902 · Opened Jul 24, 2026
ccadb prober: cache CCADB results and ignore errors for up to 48 hours Open

Difficulty 3/5 1-2 days Newbie friendliness 64/100

letsencrypt/boulder#8891 · 1 reaction · Opened Jul 20, 2026
Move WrappedMap upstream into borp Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#8875 · Opened Jul 14, 2026
Factor out database initialization code from SA Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#8874 · Opened Jul 14, 2026
Address GHA prompting workflows duplicate comment behavior Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

letsencrypt/boulder#8862 · 1 comment · Opened Jul 8, 2026
Revise GHA prompting workflows to submit review comments, blocking merge Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

letsencrypt/boulder#8861 · Opened Jul 8, 2026
Support `ca-tbr-` CAA validationmethods labels Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8821 · 1 reaction · Opened Jun 24, 2026
Split privatekey.go into the issuance and cmd/admin packages Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#8813 · Opened Jun 17, 2026
go1.27: remove build constraints Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

letsencrypt/boulder#8812 · Opened Jun 17, 2026
Admin tool command to zap a rate limit bucket Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

letsencrypt/boulder#8786 · Opened Jun 5, 2026
Rate limits incorrect after overridden until next TAT Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#8785 · Opened Jun 5, 2026
wfe: remove old user-agent context key Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

letsencrypt/boulder#8771 · 1 comment · Opened Jun 2, 2026
sa: revisit INSERT IGNORE Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

letsencrypt/boulder#8749 · Opened May 8, 2026
VA: Only use `prob` to reflect problems outside our infrastructure Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

letsencrypt/boulder#8747 · Opened May 7, 2026
Umbrella bug for MTC support Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

letsencrypt/boulder#8738 · Opened Apr 28, 2026
Require AccountURIPrefix in WFE Open

starter

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

letsencrypt/boulder#8724 · Opened Apr 21, 2026
ACME semantic variances in WFE2 Open

starter

Difficulty 5/5 Over a week Newbie friendliness 30/100

letsencrypt/boulder#8711 · 1 comment · Opened Apr 11, 2026
Remove non-standard ACME fields from WFE2 responses Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#8709 · Opened Apr 11, 2026
sa: make authz2 table cheaper Open

letsencrypt/boulder#8702 · 2 comments · 1 assignee · Opened Apr 7, 2026
ratelimits/wfe: Implement per-endpoint per-IP address rate limits Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

letsencrypt/boulder#8668 · Opened Mar 10, 2026
Non-ARI renewals for IPv6 Identifier not limited to every 34H Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

letsencrypt/boulder#8657 · Opened Mar 5, 2026

letsencrypt/boulder

Get new issues in your inbox