Burp Suite User Forum

Create new post

How to use custom certificate (I have the certificate and private key)

mono | Last updated: Jul 20, 2022 05:22PM UTC

Hi, I have a wildcard certificate and its private key for my personal website, and I want to use this certificate for burp interception. this is my cert https://imgur.com/iy4A4Ep and this is what happens when I import into burp https://imgur.com/SBidK0i Why did burp create another leaf cert or is this an expected behaviour ? Also I'm getting the following when click on mono.com in the second picture "this certificate does not appear to be valid for the selected purpose" these are the openssl commands I used to create the cert and key for burp: openssl rsa -in server.key -inform pem -out server.key.der -outform der openssl pkcs8 -topk8 -in server.key.der -inform der -out server.key.pkcs8.der -outform der -nocrypt Thanks

mono | Last updated: Jul 20, 2022 05:26PM UTC

I just realized i switch the pictures the second one is my cert and the first one is what burp imported and presents to clients

Michelle, PortSwigger Agent | Last updated: Jul 21, 2022 10:38AM UTC

Thanks for your message. Can you email support@portswigger.net with a few more details on what you need to achieve and the steps you have taken so far so we can take a closer look at this for you? Do you want to use a specific certificate for Burp's proxy listener? Were there any messages when you tried to import the certificate?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.