Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

BurpSuite Professional - Error No Supported CertificateVerify signature algorithm for RSA key

sammysrh | Last updated: Jan 11, 2022 08:57PM UTC

Hello I am having an issue when attempting to use my HardToken (CAC) certificates in tandem with burpsuite. I provide the certificates via Project Options > TLS > Client TLS Certificates > Override user options and inputting them in there. Once I do this and attempt to access the HardToken Authenticated website it states the following error "No supported CertificateVerify signature algorithm for RSA Key". Outside of burpsuite, access works just fine. How do I get this to work with Burpsuite?

Uthman, PortSwigger Agent | Last updated: Jan 12, 2022 10:48AM UTC

Hi Kirby,

Can you please replicate the issue and email support@portswigger.net with the information below?

  • A screen recording of the issue replicated
  • Diagnostics (Help > Diagnostics)
  • Enable Log exceptions to a local directory under User options > Misc > Performance Feedback. Then replicate the issue and share the exceptions log file if one is generated `
  • Information on how the certificates were created (i.e. what signature algorithms, etc...)

Adam | Last updated: Feb 07, 2023 07:30PM UTC

What was the solution to this? I am running into the exact same error "No supported CertificateVerify signature algorithm for RSA key" when I am proxying through Firefox.

Michelle, PortSwigger Agent | Last updated: Feb 08, 2023 01:35PM UTC