Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

how to use a client certificate that doesn't have a password

Glenn | Last updated: Dec 27, 2017 06:35PM UTC

I have a client certificate that is required to access a website I need to run Burp Suite Pro against but the certificate does not have a password. Is there a way of not specifying the password when trying to configure the client certificate in Burp Suite options? Thanks

PortSwigger Agent | Last updated: Dec 28, 2017 07:54AM UTC

Hi Glenn, You need to use the openssl command line to add a password, then import that into Burp. We do have a story on the development plan to streamline this, but it won't be looked at until we do other work on the SSL code. The command line will be like: openssl pkcs12 -in cert.pem -out certpw.pem

Liam, PortSwigger Agent | Last updated: Sep 05, 2019 10:31AM UTC

Thanks for the update, Christian.

Burp User | Last updated: Oct 28, 2019 03:20PM UTC