Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Genymotion android emulator TLS error

Kofi | Last updated: Jun 17, 2020 03:51PM UTC

I have already installed the cacert into system on my android emulator. when i open any app from, vimeo to instagram to facebook, i get "Error Proxy [204] The client failed to negotiate a TLS connection to graph.instagram.com:443: Received fatal alert: unknown_ca" "Error Proxy [24] The client failed to negotiate a TLS connection to api.vimeo.com:443: Received fatal alert: certificate_unknown" Please help

Ben, PortSwigger Agent | Last updated: Jun 17, 2020 05:16PM UTC

Hi, What version of Android are you running and, if the version is 7 or above, have you installed the CA at the Android OS level? Are you receiving any errors when you access HTTPS websites via the browser on your android emulator? Are all apps returning this error or is it just the ones that you have listed?

Kofi | Last updated: Jun 17, 2020 07:52PM UTC

Hi it's android 9.0 and yes the CA is installed at the OS level. The errors occur mainly with apps, not websites.

Kofi | Last updated: Jun 17, 2020 08:01PM UTC

I have installed and deleted the CA multiple times at the OS level but for some reason, I still get an "unknown_ca" error or "handshake failed".

Ben, PortSwigger Agent | Last updated: Jun 18, 2020 06:23PM UTC

Hi Kofi, Can you confirm which version of Burp you are using? Are you able to successfully load HTTP sites from the browser in your Android device and see the traffic pass through Burp (the site http://www.example.com/ is a good test of this)? If so, then this would indicate that your principal setup is fine. With the Android device running version 9.0 can you confirm that you have rooted the device in order to be able to install the certificate? You say this error occurs mainly with apps and not websites - do you receive any errors at all when proxying traffic from HTTPS sites in the Android browser? Apps can use other mechanisms, such as certificate pining, to prevent the type of man in the middle attack that the Burp proxy is essentially performing so it would be useful to know if you are seeing the errors purely with the apps or with some websites via the browser.

Kofi | Last updated: Jun 19, 2020 10:11AM UTC

I think it might be a certificate pinning issue. I'm going to be using Frida, and see if the problem still persists.

Jay | Last updated: Jun 27, 2022 12:40AM UTC

Hey ..Did you find any solution to it?

Ben, PortSwigger Agent | Last updated: Jun 27, 2022 10:22AM UTC

Hi Jay, Are you able to confirm what issue you are experiencing so that we can assist you further?

Ash | Last updated: Jul 30, 2022 09:32AM UTC

Hey, I'm using burp v2022.7.1 latest version, Android version 8.0 Oreo. I'm getting the same error (The client failed to negotiate a TLS connection to graph.instagram.com:443: Received fatal alert: unknown_ca") that occurs mainly with apps and not websites. I am not receiving any errors when proxying traffic from HTTPS sites in the Android browser(chrome). Did lots of research but couldn't find any solution... did you guys get any solution?

Ben, PortSwigger Agent | Last updated: Aug 01, 2022 09:26AM UTC