Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

ERR_CERT_AUTHORITY_INVALID

Patrick | Last updated: Feb 24, 2021 06:23AM UTC

I'm developing a web app (VUE/NUXT) and a REST API (Node). The API uses HTTPs. For local development I use a self-signed cert. I added the cert to the keychain on my Mac and indicated that I trust it always. That's my existing configuration and it works. I started using Burp to intercept API calls today and it's working for HTTP, but not HTTPs. I've tried both: "Generate CA-signed per-host certificates" and "Generate a CA-signed certificate with a specific hostname". In the latter case, I chose 127.0.0.1. I even exported the cert from Burp, converted it from the DER format to pem, then added it to my keychain. However, I'm still receiving ERR_CERT_AUTHORITY_INVALID errors. Any thoughts? Thank you

Uthman, PortSwigger Agent | Last updated: Feb 24, 2021 09:03AM UTC

Hi Patrick, Have you tried importing your self-signed cert into the Java trust store?

Patrick | Last updated: Feb 25, 2021 06:06AM UTC