Burp Suite User Forum

Login to post

Javax.net.ssl SSLException Bad_record_mac errors

Peter | Last updated: Jun 09, 2016 11:43PM UTC

I am using Burp v1.7.03 and I am seeing in the alerts tab Javax.net.ssl SSLException Bad_record_mac errors I am using a windows system with java version "1.8.0_77" Java(TM) SE Runtime Environment (build 1.8.0_77-b03) Java HotSpot(TM) 64-Bit Server VM (build 25.77-b03, mixed mode)

PortSwigger Agent | Last updated: Jun 10, 2016 10:23AM UTC

To resolve issues like this, we would suggest the following: 1. Connect directly to the server using your browser, determine the protocol and cipher that is used, and configure Burp to support just those. 2. Change the SSL workaround options at User options / SSL / Java SSL Options and Project options / SSL / SSL Negotiation 3. Try a different version of Java (6 or 7) since some issues with Java's SSL implementation are version-specific.

You need to Log in to post a reply. Or register here, for free.