Owner

openssl

8 indexed repositories · View on GitHub

openssl
General purpose TLS and crypto library

C · 30805 stars
tools
Tools for OpenSSL committers

Shell · 79 stars
technical-policies
Technical policies for the OpenSSL Library, governed by the OpenSSL Foundation and the OpenSSL Corporation

26 stars
installer
[mirror] Binary packaging / installers, where such are otherwise lacking

Python · 16 stars
general-policies
General OpenSSL Library policies, governed by the OpenSSL Foundation and the OpenSSL Corporation

15 stars
perftools
Performance testing tools

C · 9 stars
fuzz-corpora
Submodule with fuzzing corpora data (fuzz/corpora)

6 stars
release-metadata
Release and security advisory metadata for the openssl-library.org web pages

3 stars

Beginner friendly Everything

Open All

X.509 verification treats a certificate as expired at exactly its notAfter second Open

issue: bug report

Difficulty 3/5 1-2 days Newbie friendliness 78/100

openssl/openssl#32890 · Opened Sep 19, 2026
DTLS 1.3: incoming KeyUpdate clears unacknowledged session tickets Open

branch: 4.1 branch: master triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

openssl/openssl#32878 · 2 comments · Opened Sep 18, 2026
Regression from AES-CTR-VAES implementation Open

branch: master severity: regression triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openssl/openssl#32873 · 3 comments · Opened Sep 17, 2026
URI name constraints accept an IP-literal authority with excludedSubtrees only Open

help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

openssl/openssl#32858 · 1 comment · Opened Sep 16, 2026
FIPS provider 3.1.2 accepts prohibited 8-bit AES-GCM authentication tags Open

issue: bug report

Difficulty 4/5 3-5 days Newbie friendliness 58/100

openssl/openssl#32857 · 9 comments · Opened Sep 16, 2026
DTLS 1.3: client doesn't acknowledge retransmitted session tickets Open

branch: 4.1 branch: master issue: bug report

Difficulty 4/5 3-5 days Newbie friendliness 68/100

openssl/openssl#32853 · Opened Sep 16, 2026
QUIC peer max_udp_payload_size getter returns 1200 when the transport parameter is absent (openssl-4.1.0-alpha1) Open

triaged: bug

openssl/openssl#32845 · 1 comment · 2 assignees · Opened Sep 16, 2026
Ticket age wraparound breaks TLS 1.3 and DTLS 1.3 early data freshness checks Open

help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openssl/openssl#32834 · 1 comment · Opened Sep 15, 2026
RFC 9919: OCSP with SHA-256 Open

help wanted issue: feature request triaged: feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openssl/openssl#32813 · Opened Sep 13, 2026
Backport 0c2a196af8 (per-OSSL_LIB_CTX CONF storage) to 3.0-3.6: conf_ssl.c double-free still present in all release branches Open

help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openssl/openssl#32804 · 2 comments · Opened Sep 11, 2026
ECH: per-handshake connection state (s->ext.ech) is not reset by SSL_clear() Open

branch: 4.0 branch: 4.1 branch: master help wanted triaged: bug

openssl/openssl#32800 · 1 assignee · Opened Sep 11, 2026
Let a CMP client require EnvelopedData (reject EncryptedValue) for centrally generated keys Open

help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

openssl/openssl#32797 · Opened Sep 11, 2026
CA rollover regression rejects valid chains and promotes stored intermediaries to trust anchors [4.0, 4.1, master] Open

branch: 4.0 branch: 4.1 branch: master help wanted triaged: bug

openssl/openssl#32793 · 2 comments · 1 assignee · Opened Sep 11, 2026
`make doc-nits`: extend check for section order Open

triaged: feature

Difficulty 3/5 1-2 days Newbie friendliness 68/100

openssl/openssl#32785 · Opened Sep 10, 2026
ML-DSA: optimization for s390x not used anymore Open

branch: 4.1 branch: master help wanted triaged: bug

openssl/openssl#32780 · 1 assignee · Opened Sep 10, 2026
Failed to extract certificate or private key from pfx file Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

openssl/installer#23 · 5 comments · Opened Sep 9, 2026
EVP_PKEY_fromdata_settable undoes EVP_PKEY_fromdata_init Open

help wanted triaged: bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

openssl/openssl#32776 · 1 comment · Opened Sep 9, 2026
ChaCha20-Poly1305 zero-length EVP_Cipher() call can collapse distinct AAD inputs Open

branch: 3.4 branch: 3.5 branch: 3.6 branch: 4.0 branch: 4.1 branch: master help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

openssl/openssl#32752 · Opened Sep 9, 2026
Cannot properly verify a self-signed certificate signature using SM2 key Open

help wanted triaged: feature

Difficulty 4/5 3-5 days Newbie friendliness 48/100

openssl/openssl#32744 · 3 comments · 1 reaction · Opened Sep 8, 2026
GCM empty EVP_Cipher() calls alter AAD processing, OCB NULL output crashes Open

branch: 3.5 branch: 3.6 branch: 4.0 branch: master help wanted triaged: bug

openssl/openssl#32741 · 1 assignee · Opened Sep 8, 2026
CI: Add runtime validation for AArch64 GCS compliance Open

branch: master help wanted triaged: feature

openssl/openssl#32720 · 1 assignee · Opened Sep 7, 2026
SSL_write_early_data() double-counts bytes on WANT_WRITE retries Open

branch: master triaged: bug

openssl/openssl#32706 · 1 comment · 1 assignee · Opened Sep 6, 2026
ECH: external TLS 1.3 PSK handshakes fail with BAD_PSK_IDENTITY Open

branch: master triaged: bug

openssl/openssl#32705 · 2 comments · 1 assignee · Opened Sep 6, 2026
CTLOG_STORE_load_file() can report success after a CT log allocation failure Open

branch: master help wanted triaged: bug

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

openssl/openssl#32703 · 1 comment · Opened Sep 6, 2026
The "OpenSSL Style Guide" contradicts the "OpenSSL coding style" Open

triaged: documentation

openssl/openssl#32695 · 2 comments · 1 assignee · Opened Sep 5, 2026
`PKCS7_verify()` reports success when `SignerInfo.digestAlgorithm` is an unregistered OID Open

branch: 3.0 branch: 3.4 branch: 3.5 branch: 3.6 branch: 4.0 branch: master triaged: bug

openssl/openssl#32687 · 2 comments · 1 assignee · Opened Sep 4, 2026
[performance] a fast AES-GCM-SIV provider; up to 15x faster Open

branch: master help wanted triaged: feature triaged: performance

openssl/openssl#32674 · 9 comments · 1 assignee · Opened Sep 3, 2026
Zero-valued Separator Parameter Flaw Open

good first issue help wanted issue: bug report triaged: bug

Difficulty 3/5 1-2 days Newbie friendliness 72/100

openssl/openssl#32667 · 1 comment · Opened Sep 3, 2026
X509V3_EXT_nconf_nid/X509V3_EXT_nconf: Add validation checks for ML-DSA keyUsage certficate extension Open

help wanted triaged: feature

Difficulty 4/5 3-5 days Newbie friendliness 68/100

openssl/openssl#32650 · 8 comments · Opened Sep 2, 2026
CRL scope check skips the IDP/cRLIssuer match for DPs without distributionPoint (RFC 5280 6.3.3 (b)(2)(i)) Open

branch: 3.5 branch: 3.6 branch: 4.0 branch: master help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 58/100

openssl/openssl#32645 · 3 comments · 1 reaction · Opened Sep 2, 2026
EC_PRIVATEKEY (SEC1 EC private key ASN1 type) has no ASN1_OP_FREE_PRE cleansing Open

branch: master help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

openssl/openssl#32639 · 3 comments · Opened Sep 2, 2026
Documentation regarding the `OPENSSL_init_crypto` config handling is confusing Open

branch: master help wanted triaged: documentation

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

openssl/openssl#32625 · 2 comments · Opened Sep 1, 2026
Frequent test hangs in 4.1 (master) on Nonstop tests Open

branch: master help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openssl/openssl#32618 · 9 comments · Opened Aug 31, 2026
[4.1] CMS_VERIFY_RESULT can report success after signer certificate lookup fails Open

branch: master triaged: bug

Difficulty 3/5 1-2 days Newbie friendliness 64/100

openssl/openssl#32612 · 2 comments · Opened Aug 31, 2026
[4.1] CMS_verify can return success with a certificate verification error still queued Open

branch: master triaged: bug

openssl/openssl#32611 · 6 comments · 1 assignee · Opened Aug 31, 2026
`get_random_device` may be called before `ossl_rand_pool_init` Open

branch: 3.5 branch: 3.6 branch: 4.0 branch: master triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openssl/openssl#32610 · Opened Aug 31, 2026
TSAN: race condition in `X509_self_signed` Open

approval: review pending branch: master triaged: bug

openssl/openssl#32609 · 5 comments · 1 assignee · Opened Aug 31, 2026
Large test input file distributed with latest 3.0/3.5 releases Open

help wanted triaged: feature

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

openssl/openssl#32603 · 4 comments · Opened Aug 30, 2026
Deprecate TLS1.2 and below Open

hold: discussion triaged: feature

Difficulty 5/5 Over a week Newbie friendliness 25/100

openssl/openssl#32581 · 4 comments · Opened Aug 28, 2026
Provide some metadata for symmetric key objects on PKCS#12 parse Open

help wanted triaged: feature

Difficulty 4/5 3-5 days Newbie friendliness 52/100

openssl/openssl#32579 · Opened Aug 28, 2026
Add per-field control for ClientHello GREASE Open

help wanted triaged: feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

openssl/openssl#32572 · 1 comment · Opened Aug 28, 2026
CMS KTRI decrypt (cms_env.c:619): rsa_cms_decrypt error return swallowed → malformed rsaesOAEP parameters silently fall back to PKCS#1 v1.5 Open

good first issue help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

openssl/openssl#32567 · Opened Aug 28, 2026
apps/lib/tlssrp_depr.c:126 SRP callback arg holds address of a dead stack parameter → any TLS server crashes s_client -srpuser pre-auth Open

good first issue triaged: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

openssl/openssl#32565 · Opened Aug 28, 2026
To build portable pre-compiled packages and Windows installers for major platforms. Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

openssl/installer#22 · 3 comments · Opened Aug 26, 2026
cSHAKE-128/256: Truncates customization strings that contain embedded null bytes. Open

branch: 4.0 branch: master triaged: bug

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

openssl/openssl#32517 · 3 comments · Opened Aug 26, 2026
Revoked certificate accepted when a delta CRL from `X509_CRL_diff` is used in memory without a DER round trip Open

help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

openssl/openssl#32514 · 1 comment · Opened Aug 26, 2026
test_quicapi fails on AIX Open

help wanted triaged: bug

openssl/openssl#32506 · 38 comments · 1 assignee · Opened Aug 26, 2026
cms -sign -cades fails with ML-DSA signers: ESSCertIDv2 inherits SHAKE256 from the signature algorithm Open

branch: master help wanted triaged: feature

Difficulty 3/5 1-2 days Newbie friendliness 72/100

openssl/openssl#32503 · 1 comment · Opened Aug 26, 2026
Handle KeyUpdate as per RFC 9846 4.7.3 Open

branch: master triaged: feature

openssl/openssl#32497 · 2 comments · 5 assignees · Opened Aug 25, 2026
providers/legacy.so fails link stage on OpenBSD due to undefined reference to `memset' Open

help wanted triaged: bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openssl/openssl#32473 · 2 comments · Opened Aug 24, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

openssl

Showing the newest 100

Get new issues in your inbox