[GH-ISSUE #914] Proxyman generates certs longer than 398 days; unsupported as of Sept 2020 #908

Open
opened 2026-03-03 19:22:54 +03:00 by kerem · 4 comments
Owner

Originally created by @ianbby on GitHub (Jun 22, 2021).
Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/914

Originally assigned to: @NghiaTranUIT on GitHub.

Proxyman version? (Ex. Proxyman 1.4.3)

2.27.0 (22700)

macOS Version? (Ex. mac 10.14)

10.15

Steps to reproduce

Install certificate into system store on Android (requires root)

Expected behavior

Certificate works for all apps; instead, no connectivity is allowed due to too-long cert validity.

Screenshots (optional)

Validity

Hey team. I'm seeing trouble with the certificates that Proxyman generates on the fly with my Android device. Even with a custom root cert that has a validity < 1 year, Proxyman is generating certs with a two year validity. Certs that expire that far in the future are no longer supported as of Sept 2020:

Can we update Proxyman to generate on the fly certs with an expiration under the new 398 day mark?

Cheers

Originally created by @ianbby on GitHub (Jun 22, 2021). Original GitHub issue: https://github.com/ProxymanApp/Proxyman/issues/914 Originally assigned to: @NghiaTranUIT on GitHub. ### Proxyman version? (Ex. Proxyman 1.4.3) 2.27.0 (22700) ### macOS Version? (Ex. mac 10.14) 10.15 ### Steps to reproduce Install certificate into system store on Android (requires root) ### Expected behavior Certificate works for all apps; instead, no connectivity is allowed due to too-long cert validity. ### Screenshots (optional) ![Validity](https://user-images.githubusercontent.com/77275484/122969656-7e057d00-d352-11eb-841e-6e5dc5c3fe9f.png) Hey team. I'm seeing trouble with the certificates that Proxyman generates on the fly with my Android device. Even with a custom root cert that has a validity < 1 year, Proxyman is generating certs with a two year validity. Certs that expire that far in the future are no longer supported as of Sept 2020: - https://www.globalsign.com/en/blog/maximum-ssltls-certificate-validity-now-one-year - https://www.ssls.com/blog/apples-new-ssl-lifetime-limitation-and-what-it-means-for-you/ - https://chromium.googlesource.com/chromium/src/+/ae4d6809912f8171b23f6aa43c6a4e8e627de784 Can we update Proxyman to generate on the fly certs with an expiration under the new 398 day mark? Cheers
Author
Owner

@NghiaTranUIT commented on GitHub (Jun 22, 2021):

Thanks for the detailed report. Our team will check it out and sent you a Beta build this week 😊

<!-- gh-comment-id:866184370 --> @NghiaTranUIT commented on GitHub (Jun 22, 2021): Thanks for the detailed report. Our team will check it out and sent you a Beta build this week 😊
Author
Owner

@NghiaTranUIT commented on GitHub (Jun 23, 2021):

Hey @ianbby please check out this beta build: https://proxyman.s3.us-east-2.amazonaws.com/beta/Proxyman_2.28.0_Validity_397_Days.dmg

  • Proxyman will generate a leaf certificate with 397 validity days.
  • I suppose that it's not required for Proxyman Root Certificate, so it's 2 years by default.
Screen Shot 2021-06-23 at 08 52 59

Please let me know if it works for you 🌮

<!-- gh-comment-id:866466344 --> @NghiaTranUIT commented on GitHub (Jun 23, 2021): Hey @ianbby please check out this beta build: https://proxyman.s3.us-east-2.amazonaws.com/beta/Proxyman_2.28.0_Validity_397_Days.dmg - Proxyman will generate a leaf certificate with 397 validity days. - I suppose that it's not required for Proxyman Root Certificate, so it's 2 years by default. <img width="555" alt="Screen Shot 2021-06-23 at 08 52 59" src="https://user-images.githubusercontent.com/5878421/123023926-7ac9ca00-d402-11eb-8cfc-3e992732129f.png"> Please let me know if it works for you 🌮
Author
Owner

@ianbby commented on GitHub (Jun 23, 2021):

Hey Nghia! That was some wicked fast turn around, thank you! I gave the new build a go and can confirm that immediately had me sorted! Works perfectly with the new validity:
Success1
Success2

I didn't change or customize anything, just installed the new build, installed & trusted the certificate on my Mac & on the Android device, and I was set!

<!-- gh-comment-id:866734180 --> @ianbby commented on GitHub (Jun 23, 2021): Hey Nghia! That was some wicked fast turn around, thank you! I gave the new build a go and can confirm that immediately had me sorted! Works perfectly with the new validity: ![Success1](https://user-images.githubusercontent.com/77275484/123084349-a0e17100-d3e6-11eb-9a6c-8c0f05ae4a65.png) ![Success2](https://user-images.githubusercontent.com/77275484/123084352-a2129e00-d3e6-11eb-8492-5880cf0d4622.png) I didn't change or customize anything, just installed the new build, installed & trusted the certificate on my Mac & on the Android device, and I was set!
Author
Owner

@NghiaTranUIT commented on GitHub (Jun 24, 2021):

Glad to know it works 😄 🌮

<!-- gh-comment-id:867264536 --> @NghiaTranUIT commented on GitHub (Jun 24, 2021): Glad to know it works 😄 🌮
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/Proxyman#908
No description provided.