[GH-ISSUE #516] Generate certificate with BoringSSL #512

New issue

Open

opened 2026-03-03 19:19:27 +03:00 by kerem · 1 comment

kerem commented

2026-03-03 19:19:27 +03:00

Owner

Originally created by @NghiaTranUIT on GitHub (Jun 4, 2020).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/516

Originally assigned to: @NghiaTranUIT on GitHub.

Description

Currently, we dynamically generate remote certificates by executing some openssl CLI, which has a lot of cons:

Bad performance since it forks a new process
Rely on openssl from the user machine
Difficult to generate programmatically

Since we're refactoring the Core v2 by Swift NIO, it's time to migrate to BoringSSL (https://github.com/apple/swift-nio-ssl)

Acceptance Criteria

Generate programmatically the remote certificates
Remove all dependencies on openssl
Support custom Client/Server certificate

Originally created by @NghiaTranUIT on GitHub (Jun 4, 2020). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/516 Originally assigned to: @NghiaTranUIT on GitHub. ### Description Currently, we dynamically generate remote certificates by executing some `openssl` CLI, which has a lot of cons: - Bad performance since it forks a new process - Rely on `openssl` from the user machine - Difficult to generate programmatically Since we're refactoring the Core v2 by Swift NIO, it's time to migrate to BoringSSL (https://github.com/apple/swift-nio-ssl) ### Acceptance Criteria - Generate programmatically the remote certificates - Remove all dependencies on `openssl` - Support custom Client/Server certificate