Burp Suite User Forum

Create new post

Secure Connection Failed error in Firefox while accessing https site through BURP suite

Jose, | Last updated: Feb 17, 2021 03:06PM UTC

Hi, I am trying to access https sites in Firefox using Burp Suite Pro. On trying to access sites like google or any other https websites I am getting below error, Secure Connection Failed An error occurred during a connection to www.google.com. PR_END_OF_FILE_ERROR The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. Below is the error message seen in Dashboard page, The client failed to negotiate a TLS connection www.google.com:443 : No appropriate protocol. Note: I have deleted the BURP CA certificate and regenerated BURP CA certificate and imported in Firefox Browser. But the issue is not resolved. The problem exists with https sites. I am able to access http sites. Please provide a solution to resolve the issue. Thanks, Jerry

Michelle, PortSwigger Agent | Last updated: Feb 18, 2021 09:51AM UTC

Hi Jerry Thanks for your message. Are you able to access HTTPS sites using Burp's embedded browser (or other external browsers)? Are the sites displaying successfully via Firefox when it isn't proxied via Burp? Could you email me some screenshots of your Proxy Listener settings and the TLS settings under User Options and Project Options from Burp, please? If you can send them over to support@portswigger.net then that will help us to get a better understanding of what might be happening here.

Commando | Last updated: Nov 18, 2021 04:29AM UTC

Hello, I'm also experiencing the same issue with Burp Community. Firefox throws errors saying a secure connection cannot be established. I don't know why but it can't be the proxy setting 'cause I didn't tamper with those since all these while. Although, I abandoned Firefox when it would no longer load because of Burp errors showing frequently, it started working fine today and after some hours just came up with a secure connection failed. I hope to hear from an agent on this. Thanks.

Michelle, PortSwigger Agent | Last updated: Nov 18, 2021 11:43AM UTC

Thanks for your message. Are you seeing this issue with all HTTPS sites or just certain ones? If you use Burp's embedded browser to connect to the same site, does that work? Does Burp's CA certificate show in Firefox's list of trusted CAs (Privacy & Security -> View Certificates -> Authorities)? If you'd like to send us some screenshots, feel free to send them over to support@portswigger.net ad we can take a closer look at this with you.

Commando | Last updated: Nov 18, 2021 02:13PM UTC

The issue has been resolved by restarting my browser. With the first check, the site opens with Burp's embedded browser. And the certificate shows in Firefox. I would like to know what to always do if something like that shows that won't require restarting and losing time and efforts. Thanks.

Michelle, PortSwigger Agent | Last updated: Nov 18, 2021 03:50PM UTC

Thanks for the update. We have a few more questions to help us gather some more details on this issue. - How often does this happen? Can you take a screenshot of the error and send it to us at support@portswigger.net, please? - Which version of Burp Suite Community are you using? - When you stopped using Firefox did you use another browser in conjunction with Burp? If so, did you experience similar issues or did this seem to consistently work for you? This will help us to gauge whether there is a general issue here or whether the issue would appear to lie with Firefox. - If you open a new window or a new private window in Firefox do you see the error? - Once the error occurs are all sites affected from that point on?

Jack | Last updated: Mar 02, 2023 06:29AM UTC

I have solved my issue by Disabling SSL Scanning Feature in Your Antivirus Software. https://thegeekpage.com/how-to-fix-secure-connection-failed-error-in-mozilla-firefox/

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.