Abstract: A first device that lacks the private cryptographic key used to generate a cryptographic signature for a component of an application is able to obtain a signature from a second device. The second device provides data indicative of a profile or certificate that is associated with a stored private key to a data store via an intermediate device that does not access the private key. The first device provides a request that indicates the profile or certificate to the data store via an intermediate device. When a match between the request and the data provided by the second device is determined, the request is sent to the second device, which generates a cryptographic signature and provides it to the first device via the intermediate devices. The first device is therefore able to obtain signatures for components of an application from a separate device that accesses the associated private key.

Abstract: Mobile devices executing applications utilize data services worldwide. Testing of the applications for networking issues is facilitated by utilizing a test network having proxy devices placed at different physical locations. A tester may use the test network to direct traffic to and from an application under test to one of the proxy devices. Using the proxy device, the traffic is then exchanged with a real-world network, such as a cellular data network, at the different locations. The tester may thus test operation of the application under test in real-world conditions at a variety of different physical locations. The system may include a proxy host device with an intermediate module to establish Virtual Private Network (VPN) connections and to capture VPN data, including VPN protocol data, session data, and other data. The VPN data may be provided to a network system to analyze performance of an application under test.