Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

SSL_ERROR_ILLEGAL_PARAMETER_ALERT

HappyGilmore | Last updated: May 18, 2022 08:43PM UTC

This error comes up "SSL_ERROR_ILLEGAL_PARAMETER_ALERT" when I am trying to access a website. I can access the website with no trouble when the burp proxy is not enable and if I add this website to the TLS Pass Through When I turn on the proxy intercept no data pass through there that deals with website at all and nothing shows up in logger ++ or proxy history or target area the website is example is https://test_test_test.testhappy.com the cert information shows up as testhappy.com the cert is from go daddy

HappyGilmore | Last updated: May 18, 2022 08:45PM UTC

Also same thing happens when trying the built browser option in burp suite program and the version I am using is v2022.3.7

Hannah, PortSwigger Agent | Last updated: May 19, 2022 08:52AM UTC

Hi Do you have this issue with any other sites, or is it just the one specific site? Does it work correctly if you send a request to it in Repeater (you can copy the URL into your clip[board, right-click in Repeater and use "Paste URL as request)?

HappyGilmore | Last updated: May 19, 2022 12:07PM UTC

Good Day Hannah, This is the only site I have issue with I can not get anything to show up in burp suite What I had to do to get the Paste URL as request into repeater to work was use detectportal.firefox.com send to repeater and then Paste URL as request it paste it there and select send that work the website show up as see it on the browser. Also I have remove the burp ca cert from the firefox to see if it would give the normal error message about missing the CA cert nope same message. Please more help

HappyGilmore | Last updated: May 19, 2022 06:56PM UTC

Okay, I have a update on this issue with a fix I found that works. Look into this issue more after being able to Paste URL as request option in burp. After that was successful was thinking want else can I do so I play around in burp had no issue using intruder, crawling, auditing and could render the webpage in the response area. Still could not get the webpage to load correctly, bypass the proxy connection webpage and burp worked. On my kali box I look at zap a version 10 which old but works to see if the same issue would happen, it did not. So I started to use different browsers with zap no issues. was thinking maybe a older version of burp will work I was right it work no issues. So here is the burp suite community 2021.8.2 version that work with website on all browsers and version above this one would not work. To get this to work outside the kali box on my windows machine, I had to useburpsuite_pro_windows-x64_v2021_9_1 with chromium browser. I could not get any newer version of burp to work. I have not done all the research to see what bug fix made have cause this issue or the website issue itself. Glad I found a work around for this issue

Hannah, PortSwigger Agent | Last updated: May 23, 2022 12:35PM UTC

Hi I'm glad you found a workaround for this issue. Have you tried adjusting your TLS options under "Project options > TLS" and "USer options > TLS"? You could try disabling TLSv1.3 (Proxy > Options > Proxy listeners > TLS protocols), and see if that makes a difference, or alternatively, try disabling HTTP/2 ("Proxy > Options > Proxy listeners > HTTP" and "Project options > HTTP > HTTP/2") to see if that also affects the behaviour of your web app.

HappyGilmore | Last updated: May 23, 2022 01:33PM UTC

Good Day Hannah, Yes I have try all those options I have tried every option in the proxy listeners area Also tried a few in the Users Options TLS, Misc Also Project options area too

Hannah, PortSwigger Agent | Last updated: May 24, 2022 02:33PM UTC

Hi Do you have any antivirus software running on your system, that may be interfering with your connection? If so, does temporarily disabling it make a difference? Have you tried regenerating your CA certificate in Burp (Proxy > Options > Proxy listeners > Regenerate CA certificate", and the reinstalling the certificate in your browser? Alternatively, have you tried importing the CA certificate into Burp (Proxy > Options > Proxy listeners > Import/export CA certificate)?

HappyGilmore | Last updated: May 26, 2022 12:26PM UTC

Hey Hannah, Yes, I have do that with anti-virus software I have regenerating CA try that, also have tried cert from community vs pro burp version same issue. I have not tried to importing the CA cert that way will try that out and let you know.

HappyGilmore | Last updated: May 26, 2022 01:17PM UTC

Hannah, Need more help with this option you gave me to try Alternatively, have you tried importing the CA certificate into Burp (Proxy > Options > Proxy listeners > Import/export CA certificate)? When I am trying to import the CA cert from burp, I have to two options DER format and PKCS#12. Picked DER format I do not know the private key to import More help please

Hannah, PortSwigger Agent | Last updated: May 30, 2022 03:25PM UTC

Hi You mentioned that you do have anti-virus software enabled. Did you try disabling it, and did it have any impact on the error you receive?

HappyGilmore | Last updated: Jun 07, 2022 02:30PM UTC

I did not say the anti-virus software was enable The anti-virus was disable completely when testing. I was going down the list you gave to try and making comments and only idea you had was the one I said I have not tried. Then later asked from more help, with no reply.

Hannah, PortSwigger Agent | Last updated: Jun 08, 2022 02:42PM UTC

Hi If you don't have the private key, you won't be able to generate a certificate to import into Burp. Could you drop us an email at support@portswigger.net with a screen recording of your issue? Could you also send us some screenshots of the certificate details on the website? You can do this by clicking on the padlock button in your URL bar, and then clicking through for more information.

Ilya | Last updated: Jul 13, 2023 12:22PM UTC

So, I got that issue in case when I have the underscore in the target site url. https://target_site.local Changing the hosts file is one of the solutions, to remove the underscore from the sute url. https://target.local Seems like Java doesn't like the underscore in the urls. Hannah, is it possible to contact the dev team to maybe fix that? Regards, Ilia

Hannah, PortSwigger Agent | Last updated: Jul 14, 2023 02:56PM UTC

Hi Ilia I'm glad that you have a workaround for this. We've discussed this with the development teams and have the following feedback: - We’ve previously implemented a workaround for this issue with outbound connections from Burp. For example, you should not have an issue when using Repeater. - Unfortunately, implementing a workaround for this behavior in the Proxy is a more complex task that involves a bug in Java (https://bugs.openjdk.org/browse/JDK-8019345). For this reason, we've not been able to resolve this issue in the Proxy.

Khanh | Last updated: Jul 06, 2024 05:25PM UTC