[GH-ISSUE #524] Cache Remote Certificate in a Private Keychain #522

New issue

Open

opened 2026-03-03 19:19:31 +03:00 by kerem · 3 comments

kerem commented

2026-03-03 19:19:31 +03:00

Owner

Originally created by @NghiaTranUIT on GitHub (Jun 13, 2020).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/524

Originally assigned to: @NghiaTranUIT on GitHub.

Description

As the Proxyman Core v2 is almost done (https://github.com/ProxymanApp/Proxyman/issues/500), and the remote certificate is dynamically generated on the fly, but it doesn't persistently cache on the local disk.

We should store it in the Private Keychain, and receive it later for higher performance.

Acceptance Criteria

Store certificates on Private KeyChain after fetching from the remote server
Validate the expired day of the cert and fetch a new one if need

Originally created by @NghiaTranUIT on GitHub (Jun 13, 2020). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/524 Originally assigned to: @NghiaTranUIT on GitHub. ## Description As the Proxyman Core v2 is almost done (https://github.com/ProxymanApp/Proxyman/issues/500), and the remote certificate is dynamically generated on the fly, but it doesn't persistently cache on the local disk. We should store it in the Private Keychain, and receive it later for higher performance. ## Acceptance Criteria - Store certificates on Private KeyChain after fetching from the remote server - Validate the expired day of the cert and fetch a new one if need

kerem added the

enhancement

✅ Done

labels

2026-03-03 19:19:31 +03:00

kerem commented

2026-03-03 19:19:32 +03:00

Author

Owner

@shirshak55 commented on GitHub (Jun 16, 2020):

hmm i used to do this in LRU cache because cache can grow too much?

@shirshak55 commented on GitHub (Jun 16, 2020): hmm i used to do this in LRU cache because cache can grow too much?

kerem commented

2026-03-03 19:19:32 +03:00

Author

Owner

@NghiaTranUIT commented on GitHub (Jun 16, 2020):

I would put it back to Backlog, because PKCS12_create in OpenSSL doesn't work somehow 🤔

@NghiaTranUIT commented on GitHub (Jun 16, 2020): I would put it back to Backlog, because `PKCS12_create` in OpenSSL doesn't work somehow 🤔

kerem commented

2026-03-03 19:19:32 +03:00

Author

Owner

@NghiaTranUIT commented on GitHub (Mar 15, 2021):

Done on the latest build 🎉

@NghiaTranUIT commented on GitHub (Mar 15, 2021): Done on the latest build 🎉