Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Making Burp Trust/Use Custom TLS Certificates

Luke | Last updated: Jun 07, 2019 08:25AM UTC

I'm testing in an environment that has forced TLS decryption (MitM) to allow inspection of HTTPS traffic. In this environment it seems anything I try to do in Burp that involves contacting portswigger.net breaks. My Windows machine trusts the certificate being used for the MitM, but Burp seems to ignore this. Is there any way for me to force Burp to trust a CA or anything like that? Or maybe Burp has cert pinning or other TLS features making this setup break. I'm using Burp 2. I'm open to any options. If it is not possible to accomplish currently with Burp then I'd love to turn this into a feature request.

PortSwigger Agent | Last updated: Jun 07, 2019 03:57PM UTC