Burp Suite User Forum

Create new post

javax.net.ssl.SSLException: Connection reset

steve | Last updated: Jul 17, 2016 04:39AM UTC

Hi I am getting Connection Reset in one HTTPS enabled site that I am testing. In the Burpsuite alert tab, I am seeing -Attempting to auto-select SSL parameters for site - Failed to auto-select SSL parameters for site - javax.net.ssl.SSLException: Connection reset - Connection reset I have loaded the Burpsuite CA, and I am on Java version "1.8.0_92" Any experts could share their views? Thanks!

PortSwigger Agent | Last updated: Jul 18, 2016 12:50PM UTC

We would suggest the following: - Connect directly to this site using your browser, note the SSL protocol and cipher that are used, and configure Burp to use only those (and turn off auto-selection). - Try changing each of the checkbox options relating to SSL negotiation in both user and project options (some require a restart). - Try a different installation of Java (6/7/8 and Oracle/OpenJDK) since many quirks in Java's SSL implementation are version-specific.

Burp User | Last updated: Oct 06, 2016 02:11PM UTC

How do you configure burp to how use SSL protocol and cipher ?

PortSwigger Agent | Last updated: Oct 06, 2016 03:14PM UTC

You can do this at Project options / SSL / SSL Negotiation / Use custom protocols and ciphers.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.