Enum CertificateEngine

Certificate Engine option.

Namespace: Titanium.Web.Proxy.Network

Assembly: Titanium.Web.Proxy.dll

Syntax

public enum CertificateEngine

Fields

Name	Description
BouncyCastle	Uses BouncyCastle 3rd party library. Default. Issues a distinct key pair per leaf (RSA-2048 or ECDSA P-256 per CertificateKeyAlgorithm / LeafCertificateKeyAlgorithm). RSA-2048 keys are normally taken from a process-wide background buffer (see LeafRsaKeyPairBufferSize).
BouncyCastleFast	Faster BouncyCastle variant. Note: for performance it reuses a single pre-generated key pair (RSA or ECDSA, matching LeafCertificateKeyAlgorithm) across ALL generated leaf certificates. This means every intercepted host's certificate shares the same public key. Prefer BouncyCastle if per-host key isolation matters for your threat model.
DefaultWindows	Uses Windows Certification Generation API and is only valid on Windows. Observed to be faster than BouncyCastle. Note: this engine also reuses a shared private key across generated leaf certificates (Windows-only; non-Windows runtimes coerce the engine to BouncyCastle).