Owner

letsencrypt

8 indexed repositories · View on GitHub

boulder
An ACME-based certificate authority, written in Go.

Go · 5752 stars
website
Let's Encrypt Website and Documentation

HTML · 909 stars
pebble
A miniature version of Boulder, Pebble is a small RFC 8555 ACME test server not suited for a production certificate authority.

Go · 787 stars
cp-cps
ISRG / Let's Encrypt CP and CPS Documents

Python · 38 stars
spf-flattener

Go · 29 stars
gorepotemplate
A template for starting a new Go project with CI and other standard configuration used at Let's Encrypt/ISRG.

Go · 16 stars
mariadb-sequential-partition-manager-py
Manage MariaDB Partitions based on Autoincrement IDs

Python · 8 stars
sunlight-secretmanager

Go · 0 stars

Beginner friendly Everything

Open All

wfe.go `Order()` takes the order read lock recursively, which can wedge the whole DB Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

letsencrypt/pebble#554 · Opened Sep 17, 2026
mtc: figure out how to gate order "ready" status on availability of subtree signatures Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

letsencrypt/boulder#9022 · Opened Sep 11, 2026
genmtpki: use RELATIVE-OID encoding Open

letsencrypt/boulder#9021 · 1 assignee · Opened Sep 11, 2026
mtca: calculate and write subtrees Open

Difficulty 5/5 Over a week Newbie friendliness 39/100

letsencrypt/boulder#9020 · Opened Sep 11, 2026
Differentiate errors when the DNS resolver is unreachable versus a DNS error during validation Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#9018 · Opened Sep 11, 2026
Shrink size of CA issuance logs Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#9015 · Opened Sep 9, 2026
Expire orders and authzs after too much time processing Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#9013 · Opened Sep 8, 2026
all internal links are broken in rendered CP/CPS docs Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

letsencrypt/website#2326 · 1 comment · Opened Sep 4, 2026
Support ECH during http-01 and tls-alpn-01 validation Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#9009 · Opened Sep 3, 2026
CI Nits and Improvements Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#9006 · Opened Sep 2, 2026
Consider logging the SPKI hash at issuance time for easier log searches Open

letsencrypt/boulder#9002 · 1 assignee · Opened Sep 1, 2026
admin: consider a new "unblock key" subcommand Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

letsencrypt/boulder#9001 · Opened Sep 1, 2026
admin: give better previews of key blocking actions Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

letsencrypt/boulder#9000 · Opened Sep 1, 2026
treedb: deeper integration with mtca Open

letsencrypt/boulder#8998 · 1 assignee · Opened Sep 1, 2026
mtca/mtpublisher: store signed note lines in `checkpoints` table Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8991 · Opened Aug 28, 2026
PA: Streamline policy file loading Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

letsencrypt/boulder#8985 · Opened Aug 26, 2026
Remove fallback code and require SAReadOnlyService once it's in Prod crl-updater/storer configs Open

Difficulty 4/5 3-5 days Newbie friendliness 62/100

letsencrypt/boulder#8983 · Opened Aug 26, 2026
sa: stop writing to `issuedNames` table Open

letsencrypt/boulder#8982 · 1 assignee · Opened Aug 25, 2026
cert-checker: consume MTC logs Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

letsencrypt/boulder#8981 · Opened Aug 25, 2026
Instrument MTCA and MTPublisher with metrics and logs Open

letsencrypt/boulder#8980 · 1 comment · 1 assignee · Opened Aug 25, 2026
va: Validate Persistent DCV TXT Record parameter tags per RFC 8659 Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

letsencrypt/boulder#8979 · 1 reaction · Opened Aug 25, 2026
sa.UpdateRegistrationKey: take previous key as input to ensure atomicity Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#8959 · Opened Aug 19, 2026
va: Inaccurate "Redirect loop detected" error message with redirect + connectivity issues(?) Open

letsencrypt/boulder#8949 · 2 comments · 1 assignee · Opened Aug 16, 2026
Switch SFE to use oauth for zendesk integration Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8936 · Opened Aug 11, 2026
Reconcile RA "background" task timeouts. Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8931 · Opened Aug 3, 2026
ARI replaces lookup misses when the certificate serial's top byte is >= 0x80 Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

letsencrypt/pebble#550 · 1 comment · 2 reactions · Opened Aug 2, 2026
Create new MTCA ceremony type Open

letsencrypt/boulder#8919 · 1 assignee · Opened Jul 28, 2026
mtca: build standalone certificates Open

letsencrypt/boulder#8918 · 1 assignee · Opened Jul 28, 2026
mtca: Start using trees/cosginature in mtca Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

letsencrypt/boulder#8917 · Opened Jul 28, 2026
tiles: build MTCProof from tiles Open

letsencrypt/boulder#8914 · 1 comment · 1 assignee · Opened Jul 28, 2026
sa/ra: store mtcLogID and mtcEntryIndex on order objects Open

letsencrypt/boulder#8912 · 4 comments · 1 assignee · Opened Jul 28, 2026
mtca: improve tile writing performance Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8903 · Opened Jul 24, 2026
mtca: crash recovery Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

letsencrypt/boulder#8902 · Opened Jul 24, 2026
ccadb prober: cache CCADB results and ignore errors for up to 48 hours Open

Difficulty 3/5 1-2 days Newbie friendliness 64/100

letsencrypt/boulder#8891 · 1 reaction · Opened Jul 20, 2026
Move WrappedMap upstream into borp Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#8875 · Opened Jul 14, 2026
Factor out database initialization code from SA Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#8874 · Opened Jul 14, 2026
Address GHA prompting workflows duplicate comment behavior Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

letsencrypt/boulder#8862 · 1 comment · Opened Jul 8, 2026
Revise GHA prompting workflows to submit review comments, blocking merge Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

letsencrypt/boulder#8861 · Opened Jul 8, 2026
Support `ca-tbr-` CAA validationmethods labels Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

letsencrypt/boulder#8821 · 1 reaction · Opened Jun 24, 2026
Split privatekey.go into the issuance and cmd/admin packages Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/boulder#8813 · Opened Jun 17, 2026
go1.27: remove build constraints Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

letsencrypt/boulder#8812 · Opened Jun 17, 2026
Improve CI/CD surrounding ACME Client Implementations json Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/website#2235 · Opened Jun 11, 2026
Admin tool command to zap a rate limit bucket Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

letsencrypt/boulder#8786 · Opened Jun 5, 2026
Rate limits incorrect after overridden until next TAT Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

letsencrypt/boulder#8785 · Opened Jun 5, 2026
certificates page: link to CP/CPS version in effect at time of issuance Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

letsencrypt/website#2228 · Opened Jun 3, 2026
Make digitalSignature optional for TLS Subordinate CA Certificate Profile Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

letsencrypt/cp-cps#347 · Opened Jun 2, 2026
wfe: remove old user-agent context key Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

letsencrypt/boulder#8771 · 1 comment · Opened Jun 2, 2026
sa: revisit INSERT IGNORE Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

letsencrypt/boulder#8749 · Opened May 8, 2026
VA: Only use `prob` to reflect problems outside our infrastructure Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

letsencrypt/boulder#8747 · Opened May 7, 2026
Umbrella bug for MTC support Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

letsencrypt/boulder#8738 · Opened Apr 28, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

letsencrypt

Showing the newest 100

Get new issues in your inbox