Burp Suite User Forum

Login to post

burp automatically add entries on tls failure NOT WORKING

rafael | Last updated: Oct 10, 2021 04:52PM UTC

I'm using Burp community edition 2021.8.4 the .jar version The proxy feature to automatically add entries on tls failure is not working... To check that wasn't my mistake I downloaded older version of burp "burpsuite_community_v2.1.07.jar" and in the same test scenario it worked fine. With the current version it doesn't add any entry to the TLS Pass Through list Also in the older version, whenever the checkbox is checked or not, you can see the addresses that are failing the certificate check in the event log [bottom left], it shows a message like: "The client failed TLS to www.someadress.com" but the latest version HIDES the value of address, it shows only "The client failed TLS" or "certificate rejected" this is very inconvenient because even if the connection is failing is good to know WHICH ADDRESSES ARE FAILING

Michelle, PortSwigger Agent | Last updated: Oct 11, 2021 12:23PM UTC

Thanks for your message and for taking the time to raise this with us. The developers are already aware of this issue and we hope to be releasing an update soon which should address the problem of the sites not being added automatically to TLS Pass Through. I have linked this thread to the report so we can let you know when there is an update.

You need to Log in to post a reply. Or register here, for free.