mozilla-services/autograph

View on GitHub

Mozilla's digital signature service

Stars: 176
Forks: 34
Open beginner issues: 0
Indexed issues: 50
Avg merge: 1d 17h
Merged PRs (30d): 3

Dominant language: Go
License: MPL-2.0
Last GitHub push: Sep 9, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted good first issue

Beginner friendly Everything

Open All

50 open issues indexed

3rd Party support tooling (scripts) need to be transparent - move them here Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#865 · 2 comments · 1 reaction · Opened Nov 30, 2023
Configurations need someway to be explorable Open

code quality enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

mozilla-services/autograph#863 · 1 comment · Opened Nov 15, 2023
Migrate off Circle CI Open

bug code quality

Difficulty 4/5 3-5 days Newbie friendliness 30/100

mozilla-services/autograph#860 · Opened Sep 28, 2023
Update deprecated convenience images for CircleCI Open

code quality enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#857 · Opened Jun 30, 2023
Provide more details on Bad Requests Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#848 · Opened Mar 16, 2023
Update to use more recent version of PostgreSQL Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#846 · Opened Mar 8, 2023
switch signers to use io.FS abstraction Open

code quality

Difficulty 5/5 Over a week Newbie friendliness 25/100

mozilla-services/autograph#787 · Opened Oct 7, 2021
DRY up signature request log.Fields Open

code quality good first issue

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mozilla-services/autograph#786 · 2 comments · Opened Oct 7, 2021
gpg2: use cloudhsm Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#785 · Opened Oct 6, 2021
log and lint addon id and version from xpi SignFile Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#773 · Opened Sep 28, 2021
APK2 signer: verify min sdk version Open

code quality

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#746 · Opened Sep 3, 2021
provide endpoint to expose cert validity and fingerprints Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#745 · 2 comments · Opened Sep 2, 2021
APK v3 support key rotation and signing with multiple keys Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

mozilla-services/autograph#742 · Opened Aug 30, 2021
monitor: verify pgp2 and apk2 signatures Open

enhancement monitor

Difficulty 4/5 3-5 days Newbie friendliness 45/100

mozilla-services/autograph#622 · 1 comment · Opened Mar 4, 2021
make it easier to force content signature renewal Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#618 · Opened Mar 2, 2021
add option to run the autograph golang client against a content signature cert chain URL or file Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#615 · Opened Mar 2, 2021
add sequence diagrams for different signing schemes and flows Open

docs

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#609 · Opened Feb 26, 2021
convert or generate test case PEMs from der ascii format Open

code quality

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#553 · Opened Oct 20, 2020
credit contributors Open

enhancement help wanted

Difficulty 4/5 3-5 days Newbie friendliness 32/100

mozilla-services/autograph#525 · Opened Aug 25, 2020
use copyist for mocking SQL db Open

code quality

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mozilla-services/autograph#499 · Opened Jul 14, 2020
TCP listener for NLB heartbeats Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#459 · 3 comments · Opened Mar 23, 2020
check SQL statements Open

code quality

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mozilla-services/autograph#429 · Opened Jan 22, 2020
XPI signing perf optimizations for omni.ja Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#399 · Opened Nov 6, 2019
update omni.ja benchmark to not generate an RSA key Open

code quality enhancement

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#398 · Opened Nov 6, 2019
enable race detection on tests Open

code quality

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mozilla-services/autograph#392 · 1 comment · Opened Nov 1, 2019
add integration test coverage Open

code quality

Difficulty 4/5 3-5 days Newbie friendliness 38/100

mozilla-services/autograph#383 · Opened Oct 25, 2019
apk2: use cloudhsm Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

mozilla-services/autograph#381 · 2 comments · Opened Oct 24, 2019
Test genericrsa in pss mode with softhsm Open

code quality good first issue

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#371 · Opened Oct 10, 2019
X5U urls are sent as inaccessible `file://` URLs in development Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#350 · 7 comments · 1 reaction · Opened Oct 2, 2019
load test and track Fx try,ngt, and rel workloads Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

mozilla-services/autograph#347 · 5 comments · Opened Sep 25, 2019
openssl verify tests for genericrsa unit tests Open

code quality enhancement

Difficulty 3/5 1-2 days Newbie friendliness 25/100

mozilla-services/autograph#322 · Opened Aug 13, 2019
Add response code to application log. Open

code quality

Difficulty 3/5 1-2 days Newbie friendliness 45/100

mozilla-services/autograph#318 · 3 comments · 1 reaction · Opened Aug 8, 2019
run verification at a certain time Open

code quality enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mozilla-services/autograph#305 · 2 comments · Opened Jul 22, 2019
When signing omnija, we create invalid zip files Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 30/100

mozilla-services/autograph#278 · 4 comments · Opened Apr 25, 2019
server and client support alternate encodings Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

mozilla-services/autograph#276 · 3 comments · Opened Apr 23, 2019
per signer input storage Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

mozilla-services/autograph#254 · Opened Mar 26, 2019
CLI cose signature pretty printer Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

mozilla-services/autograph#249 · Opened Mar 12, 2019
Move statsd functions to their own package Open

code quality

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mozilla-services/autograph#246 · 1 comment · 1 reaction · Opened Mar 5, 2019
crypto11 reconnect on failure Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#244 · 1 comment · 1 reaction · Opened Feb 26, 2019
use explicit hsm label key in signer configs Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#232 · 3 comments · Opened Jan 22, 2019
automate key migration and rotation in HSM Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

mozilla-services/autograph#222 · Opened Jan 15, 2019
Return serial number of the signed certificate Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mozilla-services/autograph#214 · 10 comments · Opened Jan 15, 2019
Update RelEng key management docs as keys migrated Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

mozilla-services/autograph#202 · 2 comments · Opened Dec 27, 2018
rewrite autograph go CLI client Open

code quality enhancement help wanted

Difficulty 5/5 Over a week Newbie friendliness 25/100

mozilla-services/autograph#163 · Opened Oct 30, 2018
nit: enforce JAR header length and max headers Open

code quality enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#147 · 2 comments · Opened Sep 27, 2018
check mar private and public key lengths match Open

bug code quality

Difficulty 3/5 1-2 days Newbie friendliness 35/100

mozilla-services/autograph#139 · 3 comments · Opened Sep 10, 2018
benchmark HSM signing Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

mozilla-services/autograph#138 · Opened Sep 10, 2018
monitor and warn for unused keys and disable them after N days Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 20/100

mozilla-services/autograph#137 · 3 comments · Opened Sep 10, 2018
autograph-client: output signed hash without debug flag Open

enhancement help wanted

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

mozilla-services/autograph#135 · Opened Sep 10, 2018
Store authorizations in database Open

mozilla-services/autograph#96 · 6 comments · 1 assignee · Opened Jun 6, 2018

mozilla-services/autograph

Get new issues in your inbox