Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

SSL Errors

Ivan | Last updated: Mar 04, 2020 07:47AM UTC

Hi, it's me again. I've tried your solution to connect to the same website (the one of yves) but i still encounter SSL problems. I've installed also the certificate on my phone and it doesn't help. I've wrote also to your support mail, and with their solution i didn't get anything out, still SSL errors. I've also tried disabling Java SNI extension from User Options->TLS and also both TLS Negotiation workaround from Project Options->TLS. OS: Windows 10 Burp version: 2020.2 but also with 2020.1 and 2.1.07. Error: 1583307989555 Error Proxy Received fatal alert: handshake_failure 1583307989554 Error Suite [2] javax.net.ssl.SSLException: Received fatal alert: handshake_failure (on android phone i got this error: net::ERR_BLOCKED_BY_RESPONSE, it must be burp blocking the response) Any other ideas/advice? Thanks!

Ben, PortSwigger Agent | Last updated: Mar 04, 2020 01:50PM UTC

Hi Ivan, Can you just clarify what you are trying to do? Are you using Burp in conjunction with a website on a computer or are you trying to use Burp with a browser/app on a mobile device?

Ivan | Last updated: Mar 04, 2020 07:40PM UTC

Hi Ben, I'm trying to intercept an app traffic (under HTTPS) on a mobile device. The interception works well. If I use fiddler, i don't get any certificate problem or traffic problem. By the way with burp i get this errors. The same error happens with a browser on computer. If you need any other info, let me know. PS Hannah answered me from a mail sent to support@portswigger.net saying: "For the website you've specified, it appears to use TLS 1.2, ECDHE_RSA with X25519, and AES_256_GCM." I've tried those settings but got no luck. In this mail I've also stated that using Java 8, i don't get those errors. (But of course i don't have any TLS 1.3 support) Can you guys help me out? I need to work with burp (yeah, i could use java 8, but i would like to use included JRE) Thanks!

Ivan | Last updated: Mar 05, 2020 03:22AM UTC

Hi, i've just solved it!! I don't know why, but re-enabling SNI extensions make it working again! It's strange because before it didn't work. Thanks for the patience and help, cheers.

Ben, PortSwigger Agent | Last updated: Mar 05, 2020 08:32AM UTC

Hi Ivan, Glad to hear that you were able to resolve the issue. Please do not hesitate to get back in touch if you require assistance with anything else in the future.

web | Last updated: May 14, 2023 08:15PM UTC

Hi, when I want to use the embedded browser in Burp Suite I click the open browser and search something on URL I got this error : www.google.com uses an unsupported protocol. ERR_SSL_VERSION_OR_CIPHER_MISMATCH

web | Last updated: May 14, 2023 08:22PM UTC

It doesn't matter what Site Address I put on URL, It says the same error: forum.portswigger.net uses an unsupported protocol. ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Ben, PortSwigger Agent | Last updated: May 15, 2023 08:10AM UTC

Hi, If you open up your Burp Settings and navigate to the Network -> TLS -> TLS negotiation section, are you able to clarify what settings you have configured here?

web | Last updated: May 15, 2023 12:44PM UTC

I'm using Professional Burp and I don't see anything like Setting In navigation bar

Ben, PortSwigger Agent | Last updated: May 15, 2023 12:52PM UTC

Hi, Which version of Burp are you using so we can direct you to where the settings are located?

web | Last updated: May 16, 2023 11:02AM UTC

I am using version 2022.8.5. When I go to the tab proxy and to the proxy listener, if I switch the certificate to 'use a self-signed certificate,' it works, but it won't let me go to the sites with HTTPS protocol or if I switch to 'Generate CA-signed per-host certificates' it says this error:ERR_SSL_VERSION_OR_CIPHER_MISMATCH.

Ben, PortSwigger Agent | Last updated: May 17, 2023 07:26AM UTC